#123351 - 2004-07-20 08:18 PM
Re: BREAK OFF not working if SetConsole("Hide")
|
Everyone
Getting the hang of it
Registered: 2003-10-19
Posts: 81
Loc: Beale Air Force Base, CA
|
Quote:
I wonder why you use the "console" version (KiX32.exe) and not the "consoleless" WKiX32.exe since you are hiding the console anyway. BREAK has been kinda messed up in WKiX for a while too.
Because I want the user to be logged off it they terminate the script. WKiX doesn't do that. I have 2 different versions of the script, one using kixforms with no console display, and one without, where the console is set to alwaysontop in one case. The one without kixforms is a fail safe for systems that kixforms.dll wasn't successfully loaded/registered on. The kixforms I've created are purely for looks, and not needed for the script to function.
A seperate script that has been put into a kixcrypt .exe package is loaded at the end of the logon script. One version with kixforms, one version that uses a console window. It sleeps in the background for 13 hours and 50 minutes, then pops up a message stating that domain logons are limited to 14 hours, and the user will be logged off in 10 minutes. The message displays a timer counting down from 10 minutes to 0. When the timer reaches 0, the script logs the user off.
For the version of it that uses the console... I don't have to worry about someone closing it, or ending the process, it will log them off, which is what is intended anyway. For the version without the console that uses a kixform, a user with local admin privileges can still terminate kix32.exe
Hopefully that explains it a little better.
|
Top
|
|
|
|
#123354 - 2004-07-21 01:27 AM
Re: BREAK OFF not working if SetConsole("Hide")
|
Everyone
Getting the hang of it
Registered: 2003-10-19
Posts: 81
Loc: Beale Air Force Base, CA
|
Quote:
so, actually, what you are saying that "break off" works just as it should. you just don't want to read from the manual what it does.
Uh so actually you're just calling me lazy, because you were too lazy to read my posts. I know what the manual says it does, in fact if you read my posts, I mention the behavior described in the manual. What I am trying to figure out is why the behavior described in the manual isn't working if the console is hidden.
Quote:
and, you can't terminate wkix32 process with any priviledges without proper special tools.
Do you consider Task Manager a special tool? While logged in with an account that has local admin privileges to the workstation, I can go to the processes list in Task Manager, highlight wkix32.exe, click the "End Process" button, click "Yes" on the warning that says something about ending a process could adversely affect your system, and wkix32.exe will terminate. Now on my workstation, yes I do have all kinds of "special tools", such as the Windows Server 2003 resource kit. However none of those tools change the behavoir of the task manager. I can do the exact same thing from any other workstation on my network. In fact my test machine has nothing but the OS, Office, and all the latest service packs and hot fixes installed on it.
Quote:
I have a small voice in the back of my head that this behavior/bug of break off and a hidden console for kix32.exe has been talked about before.... but be damned if i can find a topic on it.
I couldn't find a topic on it either. Found some really old topics about modifying a .dll file to remove the close button from the console window... crazy stuff like that. Nothing specifically mentioning break off not working on a hidden console.
As soon as you change the console state to anything other than hidden, it works the way the manual says it should. Just doesn't work while it's still hidden.
|
Top
|
|
|
|
#123359 - 2004-07-21 02:46 AM
Re: BREAK OFF not working if SetConsole("Hide")
|
Everyone
Getting the hang of it
Registered: 2003-10-19
Posts: 81
Loc: Beale Air Force Base, CA
|
There's a catch, the MAN is part of a WAN. I don't control the WAN. Our MAN is just one domain, one "Tree" in the Active Directory "forest". Our AD servers are controlled by the people who control the WAN. We don't have access to GPOs. I've sent several GPO requests up to the people who control the WAN. They've added synchonous logon, and disable Windows XP fast logon optimization to the GPO at my request, but haven't added a few others I would like to see.
There isn't a GPO (that I know of) that will log a user off 14 hours after they log on. Don't want to set logon hours, due to shift work, and sheer number of users and workstations.
I'd post the script so you could understand what I'm doing, but it's 35 files, and over 3000 lines of code.
Thanks for the link to that thread. After reading that, it looks like this has been a problem since KiX 4.02, maybe even before that. I guess we have to do what Les said and "bend Ruud's ear" to get this fixed. Unless someone has another idea.
|
Top
|
|
|
|
#123362 - 2004-07-21 05:20 PM
Re: BREAK OFF not working if SetConsole("Hide")
|
Everyone
Getting the hang of it
Registered: 2003-10-19
Posts: 81
Loc: Beale Air Force Base, CA
|
Ok here's the results of my tests.
Test Machine 1 and 2, Test 1 O/S: Windows XP Privilege Level: Local Admin BREAK: Not set (default) Console: Alwaysontop Results: End Process on kix32.exe from Task Manager terminates the process without logging me off. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 1 and 2, Test 2 O/S: Windows XP Privilege Level: Local Admin BREAK: BREAK OFF Console: Alwaysontop Results: End Process on kix32.exe from Task Manager terminates the process without logging me off. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 1 and 2, Test 3 O/S: Windows XP Privilege Level: User BREAK: Not set (default) Console: Alwaysontop Results: End Process on kix32.exe from Task Manager results in "Access Denied" error message. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 1 and 2, Test 4 O/S: Windows XP Privilege Level: User BREAK: BREAK OFF Console: Alwaysontop Results: End Process on kix32.exe from Task Manager results in "Access Denied" error message. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 3, Test 1 O/S: Windows 2000 Privilege Level: Local Admin BREAK: Not set (default) Console: Alwaysontop Results: End Process on kix32.exe from Task Manager results in "Access Denied" error message. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 3, Test 2 O/S: Windows 2000 Privilege Level: Local Admin BREAK: BREAK OFF Console: Alwaysontop Results: End Process on kix32.exe from Task Manager results in "Access Denied" error message. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 3, Test 3 O/S: Windows 2000 Privilege Level: User BREAK: Not Set (default) Console: Alwaysontop Results: End Process on kix32.exe from Task Manager results in "Access Denied" error message. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
Test Machine 3, Test 4 O/S: Windows 2000 Privilege Level: User BREAK: BREAK OFF Console: Alwaysontop Results: End Process on kix32.exe from Task Manager results in "Access Denied" error message. Closing the console window results in logoff. End Task on console window from Task Manager results in logoff.
I ran the same tests using kixforms instead of a console window. Set the console window to hide. The results were the same on ending the process. The only thing that's different is you can't do anything to terminate the script that results in it logging you off, since there's no console window to close or end task on.
So it appears the problem is only with users that have local admin privileges on Windows XP systems. If it gave an "Access Denied" when trying to end the process like it does on 2000, I'd be happy with that.
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
1 registered
(Allen)
and 466 anonymous users online.
|
|
|