By the identifier (PID) of the process, we find out the username on behalf of which it was launched.
|
1 2 3 4 5 6 7 8 |
var pid: Integer; user: string; begin pid:= 880; user:= GetUserFromPID(pid); ShowMessage(user); end; |
Options
pid - process identifier (PID)
Result
Username or empty string if unsuccessful.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 |
function GetUserFromPID(pid: DWORD): string; type PTOKEN_USER = ^TOKEN_USER; _TOKEN_USER = record User : TSidAndAttributes; end; TOKEN_USER = _TOKEN_USER; var hToken: THandle; cbBuf: Cardinal; ptiUser: PTOKEN_USER; snu: SID_NAME_USE; ProcessHandle: THandle; UserSize, DomainSize: DWORD; bSuccess: Boolean; Domain, user: string; begin Result := ''; ProcessHandle := OpenProcess(PROCESS_QUERY_INFORMATION, False, pid); if ProcessHandle <> 0 then begin if OpenProcessToken(ProcessHandle, TOKEN_QUERY, hToken) then begin bSuccess := GetTokenInformation(hToken, TokenUser, nil, 0, cbBuf); ptiUser := nil; while (not bSuccess) and (GetLastError = ERROR_INSUFFICIENT_BUFFER) do begin ReallocMem(ptiUser, cbBuf); bSuccess := GetTokenInformation(hToken, TokenUser, ptiUser, cbBuf, cbBuf); end; CloseHandle(hToken); if not bSuccess then begin Exit; end; UserSize := 0; DomainSize := 0; LookupAccountSid(nil, ptiUser.User.Sid, nil, UserSize, nil, DomainSize, snu); if (UserSize <> 0) and (DomainSize <> 0) then begin SetLength(User, UserSize); SetLength(Domain, DomainSize); if LookupAccountSid(nil, ptiUser.User.Sid, PChar(User), UserSize, PChar(Domain), DomainSize, snu) then begin User := StrPas(PChar(User)); Domain := StrPas(PChar(Domain)); Result := User; end; end; if bSuccess then begin FreeMem(ptiUser); end; end; CloseHandle(ProcessHandle); end; end; |
