Changing how a service is configured

问题

When installing a service, there is a helpful .NET class called ServiceProcessInstaller. This class has a property Account, which is a ServiceAccount enumeration with possible values LocalService, LocalSystem, NetworkService and User.

This is fine at install-time, but does anybody know how I can change this value for an existing service?

I assuming that I need to move away from the actual install-type classes, and have been researching hooking into the advapi32 ChangeServiceConfig method, WMI and ManagementObjects etc.

Indeed I have found code which will actually change the account under which the service runs,

ManagementObject mo = new ManagementObject("Win32_Service.Name='" + myService + "'");
object[] configParams = new object[11];

configParams[6] = userName;
configParams[7] = password;

object result = mo.InvokeMethod("Change", configParams);

(which on its own looks a bit like black magic but makes sense when viewed with the ChangeServiceConfig signature)

However when I apply this code to a service which happens to be installed as LocalSystem, it has no effect (although when I interpret result the call is reporting success). This doesn't really surprise me since I am only setting a username and password, I am not saying "rather than running as a local service, this service needs to run under a specific user account".

Now, my gut feel is that I am heading along the right lines here. The problem is that none of the parameters in ChangeServiceConfig appear to offer the opportunity to do this.

Any ideas? TIA, Pete

回答1:

Error code 16 means "Service marked for deletion". Sometimes when you change service parameter, in particular when you delete / re-create a service you need to reboot your PC for operation to complete. While it's still pending, you can't manipulate service and you get error code 16.

Also, it might not be the case, that you problem has something to do with the fact that the call is inside a dll. If you put you code in a test rig dll and call it from a test rig exe (the same way you tested it in a test rig exe) and don't create / delete service in between I think it will work anyway.

The reason it does not working in your application on my opinion has to do with what you did with the service before (and this something most likely is not described in your question).

回答2:

You need Impersonate an thread to run at context of user.
Try this class :
A small C# Class for impersonating a User
or this one :
Impersonate User

回答3:

Return code is 21: "Invalid Parameter".

I ran into the same issue: Problem occurs when trying to apply a new user/password to a service which currently has "LocalSystem" with "Allow Service to interact with desktop" enabled.

To resolve, set the "DesktopInteract" flag in the "Change" query

var query = new ManagementPath(string.Format("Win32_Service.Name='{0}'", serviceName));      // string.Format("SELECT * FROM Win32_Service where Name='{0}'", serviceName);

using (ManagementObject service = new ManagementObject(query))
{
    object[] wmiParams = new object[10];

    //WMI update doesn't work if the service's user is currently set to LocalSystem
    //  with Interact with desktop on
    wmiParams[5] = false;
    wmiParams[6] = serviceUserName;
    wmiParams[7] = password;
    //update credentials for the service
    var rtn = service.InvokeMethod("Change", wmiParams);

}

来源：https://stackoverflow.com/questions/5896572/changing-how-a-service-is-configured