C++ WMI 获取知道用户 SID 的帐户名

C++ WMI Get AccountName knowing the user SID

本文关键字:SID 用户 WMI 获取 C++      更新时间:2023-10-16

我想检索知道其 SID 的用户帐户名。SID 是使用 WMI 查询获取的:Select * from Win32_UserProfile ,我正在尝试使用以下查询获取用户帐户名:

Select * from Win32_SID where SID='S-1-5-21-3949351935-1180888718-2463404063-9346'

ExecQuery方法成功,但IEnumWbemClassObject中的Next方法失败,并显示错误:H80041024 (wbemErrProviderNotCapable)。

任何帮助都会很棒。谢谢。

MSDN文档所述,无法枚举 WMI 类Win32_SID

因此,您不能使用 ExecQuery 方法,而是使用 IWbemServices::GetObject 函数传递正确的 WMI object path 类似 Win32_SID.SID='S-1-5-82-1036420768-1044797643-1061213386-2937092688-4282445334'

试用此示例

#include "stdafx.h"
#define _WIN32_DCOM
#include <iostream>
using namespace std;
#include <comdef.h>
#include <Wbemidl.h>
# pragma comment(lib, "wbemuuid.lib")
#pragma argsused
int main(int argc, char* argv[])
{
    BSTR strNetworkResource;
    strNetworkResource =  L"\\.\root\CIMV2";
    // Initialize COM. ------------------------------------------
    HRESULT hres;
    hres =  CoInitializeEx(0, COINIT_MULTITHREADED);
    if (FAILED(hres))
    {
        cout << "Failed to initialize COM library. Error code = 0x" << hex << hres << endl;
        cout << _com_error(hres).ErrorMessage() << endl;
        cout << "press enter to exit" << endl;
        cin.get();      
        return 1;                  // Program has failed.
    }
    // Set general COM security levels --------------------------
        hres =  CoInitializeSecurity(
            NULL,
            -1,                          // COM authentication
            NULL,                        // Authentication services
            NULL,                        // Reserved
            RPC_C_AUTHN_LEVEL_DEFAULT,   // Default authentication
            RPC_C_IMP_LEVEL_IMPERSONATE, // Default Impersonation
            NULL,                        // Authentication info
            EOAC_NONE,                   // Additional capabilities
            NULL                         // Reserved
            );

    if (FAILED(hres))
    {
        cout << "Failed to initialize security. Error code = 0x" << hex << hres << endl;
        cout << _com_error(hres).ErrorMessage() << endl;
        CoUninitialize();
        cout << "press enter to exit" << endl;
        cin.get();      
        return 1;                    // Program has failed.
    }
    // Obtain the initial locator to WMI -------------------------
    IWbemLocator *pLoc = NULL;
    hres = CoCreateInstance(CLSID_WbemLocator, 0, CLSCTX_INPROC_SERVER, IID_IWbemLocator, (LPVOID *) &pLoc);
    if (FAILED(hres))
    {
        cout << "Failed to create IWbemLocator object." << " Err code = 0x" << hex << hres << endl;
        cout << _com_error(hres).ErrorMessage() << endl;
        CoUninitialize();       
        cout << "press enter to exit" << endl;
        cin.get();      
        return 1;                 // Program has failed.
    }
    // Connect to WMI through the IWbemLocator::ConnectServer method
    IWbemServices *pSvc = NULL;

    hres = pLoc->ConnectServer(
            _bstr_t(strNetworkResource),      // Object path of WMI namespace
            NULL,                    // User name. NULL = current user
            NULL,                    // User password. NULL = current
            0,                       // Locale. NULL indicates current
            NULL,                    // Security flags.
            0,                       // Authority (e.g. Kerberos)
            0,                       // Context object
            &pSvc                    // pointer to IWbemServices proxy
            );
    if (FAILED(hres))
    {
        cout << "Could not connect. Error code = 0x" << hex << hres << endl;    
        cout << _com_error(hres).ErrorMessage() << endl;
        pLoc->Release();
        CoUninitialize();
        cout << "press enter to exit" << endl;
        cin.get();          
        return 1;                // Program has failed.
    }
    cout << "Connected to root\CIMV2 WMI namespace" << endl;
    // Set security levels on the proxy -------------------------
        hres = CoSetProxyBlanket(
           pSvc,                        // Indicates the proxy to set
           RPC_C_AUTHN_WINNT,           // RPC_C_AUTHN_xxx
           RPC_C_AUTHZ_NONE,            // RPC_C_AUTHZ_xxx
           NULL,                        // Server principal name
           RPC_C_AUTHN_LEVEL_CALL,      // RPC_C_AUTHN_LEVEL_xxx
           RPC_C_IMP_LEVEL_IMPERSONATE, // RPC_C_IMP_LEVEL_xxx
           NULL,                        // client identity
           EOAC_NONE                    // proxy capabilities
        );
    if (FAILED(hres))
    {
        cout << "Could not set proxy blanket. Error code = 0x" << hex << hres << endl;
        cout << _com_error(hres).ErrorMessage() << endl;
        pSvc->Release();
        pLoc->Release();
        CoUninitialize();
        cout << "press enter to exit" << endl;
        cin.get();      
        return 1;               // Program has failed.
    }
    // Use the IWbemServices pointer to make requests of WMI ----
    IWbemClassObject *pclsObj = NULL;
    hres = pSvc->GetObject(L"Win32_SID.SID='S-1-5-82-1036420768-1044797643-1061213386-2937092688-4282445334'",  0, NULL, &pclsObj, NULL);
    if (FAILED(hres))
    {
        cout << "GetObject failed" << " Error code = 0x"    << hex << hres << endl;
        cout << _com_error(hres).ErrorMessage() << endl;
        pSvc->Release();
        pLoc->Release();
        CoUninitialize();
        cout << "press enter to exit" << endl;
        cin.get();      
        return 1;               // Program has failed.
    }
    else
    {
        VARIANT vtProp;
        HRESULT hr = pclsObj->Get(L"AccountName", 0, &vtProp, 0, 0);// String
        if (!FAILED(hr))
        {
            if ((vtProp.vt==VT_NULL) || (vtProp.vt==VT_EMPTY))
            wcout << "AccountName : " << ((vtProp.vt==VT_NULL) ? "NULL" : "EMPTY") << endl;
            else
            wcout << "AccountName : " << vtProp.bstrVal << endl;
        }
        VariantClear(&vtProp);
        pclsObj->Release();
        pclsObj=NULL;
    }
    // Cleanup
    pSvc->Release();
    pLoc->Release();
    if (pclsObj!=NULL)
     pclsObj->Release();
    CoUninitialize();
    cout << "press enter to exit" << endl;
    cin.get();
    return 0;   // Program successfully completed.
}

这是 WMI 的问题之一:它提供了一个统一的接口,但几乎所有数据都来自其他代码。其他一些代码不会向 WMI 提供所有数据,即使数据显然可用。如果仍然需要数据,则可能需要绕过 WMI 并直接从源获取数据。

幸运的是,在这种情况下,这相当简单:您可以致电LookupAccountSid来准确获取所需的内容。