Anti End Task, not WM_Close?

[fkerber]

Hi,

do you mean this one:
http://www.microsoft.com/presspass/n...ToolkitFS.mspx

Bye,
Frederic

[rollstuhlfahrer]

Yes, meant this one.

Bernhard

[user]

Zitat von rollstuhlfahrer:

So, why do the users need administrative privileges?

Zitat von Assarbad:

Well, in this case it's neither secure nor is it the right approach. Sorry to say

Policy from that place. I can't say any reason about this because I just make the program. I am not the boss :p

I guess by writing service, my problem easier to solve. Thanks for the mini-filter.

Zitat von Assarbad:

but the OP might appreciate to get his hands on a copy

Ehmmm... no thanks , I can't use product from other.

Zitat von Assarbad:

Nope.

That's the answers!

I am still trying to block End Task, if I found the way, I'll post to this board

[rollstuhlfahrer]

Then search for all ways how to terminate a process and block them. The easiest way to do so is to block OpenProcess for all matters (and to handle OnCloseQuery). To let Windows shutdown, Windows is issuing a broadcast message on WM_ENDSESSION. After this message (and the check, that this message came from Windows and not from anybody else issuing WM_ENDSESSION to your window) your program needs to be terminatable.

Bernhard

ADD: Which implies: If someone hooks GetSystemMetrics, and tells your program after issuing the WM_ENDSESSION-Message to your window, your process becomes terminateable even if Windows does not really shut down.

[Assarbad]

Zitat von user:

Policy from that place. I can't say any reason about this because I just make the program. I am not the boss :p

I guess by writing service, my problem easier to solve. Thanks for the mini-filter.

A mini-filter is going to make it even harder than some UM hooks, but if the users have admin privileges, nothing will keep them from circumventing any of those measures, given they have the necessary know-how.