c# - WMI ConnectServer 到 ROOT\CIMV2 为 C++ 应用程序返回“拒绝访问”，但对 C# 应用程序工作正常

问题描述

我正在关注这篇文章来查询 WMI。目的是通过使用查询来获取正在运行的进程的详细信息Select * from Win32_Process，一旦查询成功，迭代结果。但是在调用期间pLoc->ConnectServer(_bstr_t(L"\\ROOT\\CIMV2"), NULL, NULL,0,NULL,0,0,&pSvc);，我得到HRESULT_FROM_WIN32(ERROR_SERVICE_DOES_NOT_EXIST) : The specified service does not exist as an installed service.我已经检查了 WMI Control 的权限compmgmt.msc ，它似乎没问题。我尝试以管理员身份运行应用程序，结果相同。

编辑代码

HRESULT hres;

// Initialize COM.
hres = CoInitializeEx(0, COINIT_MULTITHREADED);
if (FAILED(hres))
{
    cout << "Failed to initialize COM library. "
        << "Error code = 0x"
        << hex << hres << endl;
    return 1;              // Program has failed.
}

// Initialize 
hres = CoInitializeSecurity(
    NULL,
    -1,      // COM negotiates service                  
    NULL,    // Authentication services
    NULL,    // Reserved
    RPC_C_AUTHN_LEVEL_DEFAULT,    // authentication
    RPC_C_IMP_LEVEL_IMPERSONATE,  // Impersonation
    NULL,             // Authentication info 
    EOAC_NONE,        // Additional capabilities
    NULL              // Reserved
);


if (FAILED(hres))
{
    cout << "Failed to initialize security. "
        << "Error code = 0x"
        << hex << hres << endl;
    CoUninitialize();
    return 1;          // Program has failed.
}

// Obtain the initial locator to Windows Management
// on a particular host computer.
IWbemLocator *pLoc = 0;

hres = CoCreateInstance(
    CLSID_WbemLocator,
    0,
    CLSCTX_INPROC_SERVER,
    IID_IWbemLocator, (LPVOID *)&pLoc);

if (FAILED(hres))
{
    cout << "Failed to create IWbemLocator object. "
        << "Error code = 0x"
        << hex << hres << endl;
    CoUninitialize();
    return 1;       // Program has failed.
}

IWbemServices *pSvc = 0;

// Connect to the root\cimv2 namespace with the
// current user and obtain pointer pSvc
// to make IWbemServices calls.

hres = pLoc->ConnectServer(

    _bstr_t(L"\\ROOT\\CIMV2"), // WMI namespace
    NULL,                    // User name
    NULL,                    // User password
    0,                       // Locale
    NULL,                    // Security flags                 
    0,                       // Authority       
    0,                       // Context object
    &pSvc                    // IWbemServices proxy
);

if (FAILED(hres))
{
    cout << "Could not connect. Error code = 0x"
        << hex << hres << endl;
    pLoc->Release();
    CoUninitialize();
    return 1;                // Program has failed.
}

cout << "Connected to ROOT\\CIMV2 WMI namespace" << endl;

// Set the IWbemServices proxy so that impersonation
// of the user (client) occurs.
hres = CoSetProxyBlanket(

    pSvc,                         // the proxy to set
    RPC_C_AUTHN_WINNT,            // authentication service
    RPC_C_AUTHZ_NONE,             // authorization service
    NULL,                         // Server principal name
    RPC_C_AUTHN_LEVEL_CALL,       // authentication level
    RPC_C_IMP_LEVEL_IMPERSONATE,  // impersonation level
    NULL,                         // client identity 
    EOAC_NONE                     // proxy capabilities     
);

if (FAILED(hres))
{
    cout << "Could not set proxy blanket. Error code = 0x"
        << hex << hres << endl;
    pSvc->Release();
    pLoc->Release();
    CoUninitialize();
    return 1;               // Program has failed.
}


// Use the IWbemServices pointer to make requests of WMI. 
// Make requests here:

// For example, query for all the running processes
IEnumWbemClassObject* pEnumerator = NULL;
hres = pSvc->ExecQuery(
    bstr_t("WQL"),
    bstr_t("SELECT * FROM Win32_Process"),
    WBEM_FLAG_FORWARD_ONLY | WBEM_FLAG_RETURN_IMMEDIATELY,
    NULL,
    &pEnumerator);

if (FAILED(hres))
{
    cout << "Query for processes failed. "
        << "Error code = 0x"
        << hex << hres << endl;
    pSvc->Release();
    pLoc->Release();
    CoUninitialize();
    return 1;               // Program has failed.
}
else
{
    IWbemClassObject *pclsObj;
    ULONG uReturn = 0;

    while (pEnumerator)
    {
        hres = pEnumerator->Next(WBEM_INFINITE, 1,
            &pclsObj, &uReturn);

        if (0 == uReturn)
        {
            break;
        }

        VARIANT vtProp;

        // Get the value of the Name property
        hres = pclsObj->Get(L"Name", 0, &vtProp, 0, 0);
        wcout << "Process Name : " << vtProp.bstrVal << endl;
        VariantClear(&vtProp);

        pclsObj->Release();
        pclsObj = NULL;
    }

}

// Cleanup
// ========

pSvc->Release();
pLoc->Release();
pEnumerator->Release();

CoUninitialize();

return 0;   // Program successfully completed.

}

我在 C# 中也有类似的代码库。我正在使用ObjectQuery来形成 sql 查询并ManagementObjectSearcher返回结果。我使用的查询略有不同Select * from Win32_Process Where ProcessID = '" + PID + "'。PID 通过迭代的结果来传递Process.GetProcesses()。这个 C# 应用程序运行良好，我可以看到所有正在运行的进程的详细信息。

编辑代码

 ObjectQuery sq = new ObjectQuery
             ("Select * from Win32_Process Where ProcessID = '" + PID + "'");

            ManagementObjectSearcher searcher = new ManagementObjectSearcher(scope, sq);
            if (searcher == null)
            {
                Console.WriteLine("Searcher is empty...returning");
                return String.Empty;
            }
            if (searcher.Get().Count == 0)
                return OwnerSID;
            foreach (ManagementObject oReturn in searcher.Get())
            {
                using (ManagementObjectCollection oReturnC = searcher.Get())
                {
                    FullPath = (from mo in oReturnC.Cast<ManagementObject>() select mo["ExecutablePath"]).First().ToString();
                    CommandLine = (from mo in oReturnC.Cast<ManagementObject>() select mo["CommandLine"]).First().ToString();
                    parentprocessid = (from mo in oReturnC.Cast<ManagementObject>() select mo["ParentProcessId"]).First().ToString();
                    ppid = Convert.ToInt32(parentprocessid);
                    Process parentProcess = Process.GetProcessById(ppid);
                    ppname = parentProcess.ProcessName;
                }

            }

我发现的另一个奇怪行为是，当我将 C# 从 Application 更改为 dll，并在 C++ 应用程序中使用此 dll（遗留原因）之后，我得到了同样的错误 - The specified service does not exist as an installed service。

我用谷歌搜索了很多，找不到任何解决这个问题的方法。C# 是否有任何理由能够访问 WMI 而不是 C++。

标签： c#c++windowswinapiwin32-process

c# - WMI ConnectServer 到 ROOT\CIMV2 为 C++ 应用程序返回“拒绝访问”，但对 C# 应用程序工作正常

问题描述

解决方案

推荐阅读