starred/terminal
1
0
Fork 0
mirror of https://github.com/microsoft/terminal.git synced 2026-02-03 21:25:34 +00:00
Code Issues 19.0k Packages Projects Releases 20 Wiki Activity

Starting a ConPTY process with UAC elevation #496

New Issue
Closed
opened 2026-01-30 21:53:43 +00:00 by claunia · 8 comments
claunia commented 2026-01-30 21:53:43 +00:00
Owner
Copy Link

Originally created by @Eugeny on GitHub (Dec 23, 2018).

What is the Microsoft's recommended way to start an elevated process with an attached PTY?

  1. CredUIPromptForWindowsCredentialsW + LogonUserW + CreateProcessWithTokenW?
  2. Running runas.exe with a PTY?
  3. Something else?
Originally created by @Eugeny on GitHub (Dec 23, 2018). What is the Microsoft's recommended way to start an elevated process with an attached PTY? 1) CredUIPromptForWindowsCredentialsW + LogonUserW + CreateProcessWithTokenW? 2) Running runas.exe with a PTY? 3) Something else?
claunia added the Issue-QuestionArea-InteropResolution-Won't-FixProduct-Conpty labels 2026-01-30 21:53:43 +00:00
claunia commented 2026-01-30 21:53:44 +00:00
Author
Owner
Copy Link

@Biswa96 commented on GitHub (Dec 23, 2018):

KernelBase.dll has an un-exported function CreatePseduoConsoleAsUser() which uses CreateProcessAsUserW(hToken, ...). The hToken parameter can be configured with admin privileges. It seems that the underlying conhost.exe process should also be run as administrator.

@Biswa96 commented on GitHub (Dec 23, 2018): `KernelBase.dll` has an un-exported function `CreatePseduoConsoleAsUser()` which uses `CreateProcessAsUserW(hToken, ...)`. The `hToken` parameter can be configured with admin privileges. It seems that the underlying `conhost.exe` process should also be run as administrator.
claunia commented 2026-01-30 21:53:44 +00:00
Author
Owner
Copy Link

@DHowett commented on GitHub (Dec 23, 2018):

@Biswa96 please do not encourage people to rely on our private APIs.

@DHowett commented on GitHub (Dec 23, 2018): @Biswa96 please do not encourage people to rely on our private APIs.
claunia commented 2026-01-30 21:53:44 +00:00
Author
Owner
Copy Link

@DHowett commented on GitHub (Dec 23, 2018):

@Eugeny we don’t have an official stance on elevating a pseudoconsole client. At the moment, you’d have the best chance of success by shipping an elevated helper and using that to broker communication with your lower-IL process.

@DHowett commented on GitHub (Dec 23, 2018): @Eugeny we don’t have an official stance on elevating a pseudoconsole client. At the moment, you’d have the best chance of success by shipping an elevated helper and using that to broker communication with your lower-IL process.
claunia commented 2026-01-30 21:53:45 +00:00
Author
Owner
Copy Link

@parkovski commented on GitHub (Jan 5, 2019):

I don't think the private API really matters here - when you call CreateProcessAsUser, you need to have SE_ASSIGNPRIMARYTOKEN_NAME, which restricted tokens don't have. So the only thing that API would help with is letting you create a PTY as another user if you are already elevated.

I'm experimenting with these scenarios here, but it's very experimental at the moment.

@parkovski commented on GitHub (Jan 5, 2019): I don't think the private API really matters here - when you call `CreateProcessAsUser`, you need to have `SE_ASSIGNPRIMARYTOKEN_NAME`, which restricted tokens don't have. So the only thing that API would help with is letting you create a PTY as another user _if you are already elevated_. I'm experimenting with these scenarios [here](https://github.com/parkovski/wsudo), but it's **very** experimental at the moment.
claunia commented 2026-01-30 21:53:45 +00:00
Author
Owner
Copy Link

@DHowett-MSFT commented on GitHub (May 18, 2019):

This discussion has, perhaps, outlived its usefulness.

@DHowett-MSFT commented on GitHub (May 18, 2019): This discussion has, perhaps, outlived its usefulness.
claunia commented 2026-01-30 21:53:45 +00:00
Author
Owner
Copy Link

@Biswa96 commented on GitHub (Sep 22, 2019):

The private API CreatePseduoConsoleAsUser() now becomes a open source one in src/winconpty/winconpty.cpp.

@Biswa96 commented on GitHub (Sep 22, 2019): The private API `CreatePseduoConsoleAsUser()` now becomes a open source one in `src/winconpty/winconpty.cpp`.
claunia commented 2026-01-30 21:53:45 +00:00
Author
Owner
Copy Link

@DHowett-MSFT commented on GitHub (Sep 22, 2019):

Creating a process as a different user was always possible, even without a pseudoconsole running as that user. The hard part is getting the correct part of the user's split token to launch elevated, which CreatePseudoConsoleAsUser still doesn't let you do. 😄

@DHowett-MSFT commented on GitHub (Sep 22, 2019): Creating a process as a different user was always possible, even without a pseudoconsole running as that user. The hard part is getting the correct part of the user's split token to launch _elevated_, which CreatePseudoConsoleAsUser _still_ doesn't let you do. :smile:
claunia commented 2026-01-30 21:53:46 +00:00
Author
Owner
Copy Link

@DHowett-MSFT commented on GitHub (Sep 22, 2019):

to wit: it is subject to the same limitation @parkovski already pointed out.

@DHowett-MSFT commented on GitHub (Sep 22, 2019): to wit: it is subject to the same limitation @parkovski already pointed out.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
⛺ Reserved
A11yCO
A11yMAS
A11ySev1
A11ySev2
A11ySev3
A11yTTValidated
A11yUsable
A11yVoiceAccess
A11yWCAG
Area-Accessibility
Area-AtlasEngine
Area-AzureShell
Area-Build
Area-Build
Area-Chat
Area-CmdPal
Area-CodeHealth
Area-Commandline
Area-CookedRead
Area-DefApp
Area-Extensibility
Area-Fonts
Area-GroupPolicy
Area-i18n
Area-Input
Area-Interaction
Area-Interop
Area-Localization
Area-Output
Area-Performance
Area-Portable
Area-Quality
Area-Remoting
Area-Rendering
Area-Schema
Area-Server
Area-Settings
Area-SettingsUI
Area-ShellExtension
Area-ShellExtension
Area-ShellExtension
Area-Suggestions
Area-Suggestions
Area-TerminalConnection
Area-TerminalControl
Area-Theming
Area-UserInterface
Area-VT
Area-Windowing
Area-WPFControl
AutoMerge
Blocking-Ingestion
Culprit-Centennial
Culprit-WinUI
Disability-All
Disability-Blind
Disability-LowVision
Disability-Mobility
External-Blocked-WinUI3
Fixed
Gathering-Data
good first issue
HCL-E+D
HCL-WindowsTerminal
Help Wanted
Impact-Compatibility
Impact-Compliance
Impact-Correctness
Impact-Visual
In-PR
InclusionBacklog
InclusionBacklog-Windows TerminalWin32
InclusionCommitted-202206
Issue-Bug
Issue-Docs
Issue-Feature
Issue-Feature
Issue-Question
Issue-Samples
Issue-Scenario
Issue-Task
Needs-Attention
Needs-Author-Feedback
Needs-Bisect
Needs-Discussion
Needs-Repro
Needs-Tag-Fix
Needs-Tag-Fix
Needs-Triage
No-Recent-Activity
Priority-0
Priority-1
Priority-2
Priority-3
Product-Cmd.exe
Product-Colortool
Product-Colortool
Product-Colortool
Product-Conhost
Product-Conpty
Product-Meta
Product-Powershell
Product-Terminal
Product-WSL
pull-request
Mirrored from GitHub Pull Request
 Resolution-Answered
Resolution-By-Design
Resolution-Duplicate
Resolution-External
Resolution-Fix-Available
Resolution-Fix-Committed
Resolution-No-Repro
Resolution-Won't-Fix
Severity-Blocking
Severity-Crash
Severity-DataLoss
spam
this-will-be-a-breaking-change
Tracking-External
WindowsTerminal_Win32
Work-Item
zAskModeBug
zInbox-Bug
No Label Area-Interop Issue-Question Product-Conpty Resolution-Won't-Fix
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claunia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#496
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?