Question

VC/Delphi怎样根据pid获取进程用户名？

VC/Delphi怎样根据pid获取进程用户名？不要wmi，也不要根据进程名的。VC请不要有WtsApi32.h，这东西我没有。

Answer 1

Function GetProcessUser(hprocess: THandle): String;
Type
PTokenUser = ^TTokenUser;
_TOKEN_USER = Record
User: TSIDAndAttributes;
End;
TTokenUser = _TOKEN_USER;
Var
hToken: THandle;
dwSize, dwUserSize, dwDomainSize: DWORD;
pUser: PTokenUser;
szUserName, szDomainName: Array Of Char;
peUse: SID_NAME_USE;
Begin
If Not OpenProcessToken(hprocess, TOKEN_QUERY, hToken) Then
Exit;
GetTokenInformation(hToken, TokenUser, Nil, 0, dwSize);
pUser := Nil;
ReallocMem(pUser, dwSize);
dwUserSize := 0;
dwDomainSize := 0;
If Not GetTokenInformation(hToken, TokenUser, pUser, dwSize, dwSize) Then
Exit;
LookupAccountSid(Nil, pUser.User.Sid, Nil, dwUserSize, Nil, dwDomainSize, peUse);
If (dwUserSize <> 0) And (dwDomainSize <> 0) Then
Begin
SetLength(szUserName, dwUserSize);
SetLength(szDomainName, dwDomainSize);
LookupAccountSid(Nil, pUser.User.Sid, PChar(szUserName), dwUserSize, PChar(szDomainName), dwDomainSize, peUse);
End;
Result := PChar(szDomainName) + '\' + PChar(szUserName);
CloseHandle(hToken);
FreeMem(pUser);
End;

追问

有没有直接用pid的？这个用的是句柄

追答

Function GetProcessUser(PID: DWORD): String;
Type
PTokenUser = ^TTokenUser;
_TOKEN_USER = Record
User: TSIDAndAttributes;
End;
TTokenUser = _TOKEN_USER;
Var
hToken: THandle; dwSize, dwUserSize, dwDomainSize: DWORD;
pUser: PTokenUser; szUserName, szDomainName: Array Of Char;
peUse: SID_NAME_USE;
hprocess: THandle;
Begin
hprocess := OpenProcess(PROCESS_QUERY_INFORMATION, False, PID);
If hprocess 0 Then
Begin