s.gruessing/IT-Nexus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix: RDP Consent-Dialog via WTSQueryUserToken+CreateProcessAsUser (v2.4.0)

Browse Source 
- SessionSpawner.cs: Neuer Helper — WTSQueryUserToken + CreateProcessAsUser
  ersetzt fragilen schtasks-Ansatz für UI-Spawn aus SYSTEM-Service
- RtcService: SpawnConsentHelper + SpawnCaptureHelper nutzen jetzt SessionSpawner
- Findet aktive Console-Session automatisch, Fallback auf alle Sessions
- Version: 2.3.0 → 2.4.0

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Simon Grüssing
2026-06-17 09:51:40 +02:00
parent 99830e25f4
commit 7449b64398
5 changed files with 167 additions and 103 deletions
Download Patch File Download Diff File Expand all files Collapse all files

104
agent-cs/Services/RtcService.cs
View File

@@ -141,55 +141,8 @@ public class RtcService
private static bool SpawnConsentHelper(string exePath, string portStr)
{
try
{
var fullUser = NotificationService.GetLoggedOnUser();
if (string.IsNullOrEmpty(fullUser))
{
AgentWorker.Log("RDP: Kein eingeloggter User für Consent");
return false;
}
var taskName = $"ITNexus-RDPConsent-{portStr}";
Process.Start(new ProcessStartInfo("schtasks.exe", $"/delete /tn \"{taskName}\" /f")
{ CreateNoWindow = true })?.WaitForExit();
var triggerTime = DateTime.Now.AddMinutes(60).ToString("HH:mm:ss");
var ruArg = fullUser.StartsWith("AzureAD\\", StringComparison.OrdinalIgnoreCase)
? "/ru \"INTERACTIVE\""
: $"/ru \"{fullUser}\"";
var args = $"/create /tn \"{taskName}\" /tr \"\\\"{exePath}\\\" --rdp-consent {portStr}\" " +
$"/sc ONCE /st {triggerTime} {ruArg} /it /f";
var p = Process.Start(new ProcessStartInfo("schtasks.exe", args)
{ CreateNoWindow = true, RedirectStandardError = true, UseShellExecute = false });
p?.WaitForExit();
if (p?.ExitCode != 0)
{
AgentWorker.Log($"RDP: schtasks consent fehlgeschlagen (ExitCode={p?.ExitCode})");
return false;
}
Process.Start(new ProcessStartInfo("schtasks.exe", $"/run /tn \"{taskName}\"")
{ CreateNoWindow = true })?.WaitForExit();
_ = Task.Run(async () =>
{
await Task.Delay(40000);
Process.Start(new ProcessStartInfo("schtasks.exe", $"/delete /tn \"{taskName}\" /f")
{ CreateNoWindow = true })?.WaitForExit();
});
AgentWorker.Log($"RDP: Consent-Helper gestartet als '{fullUser}'");
return true;
}
catch (Exception ex)
{
AgentWorker.Log($"RDP: SpawnConsentHelper Fehler: {ex.Message}");
return false;
}
var pid = SessionSpawner.SpawnInUserSession(exePath, $"--rdp-consent {portStr}");
return pid > 0;
}
private async Task CapturePipeLoopAsync(ClientWebSocket ws, int screenIdx, CancellationToken ct)
@@ -273,56 +226,7 @@ public class RtcService
private static bool SpawnCaptureHelper(string exePath, string portStr, int screenIdx = 0)
{
try
{
var fullUser = NotificationService.GetLoggedOnUser();
if (string.IsNullOrEmpty(fullUser))
{
AgentWorker.Log("RDP: Kein eingeloggter User gefunden");
return false;
}
var taskName = $"ITNexus-RDP-{portStr}";
Process.Start(new ProcessStartInfo("schtasks.exe", $"/delete /tn \"{taskName}\" /f")
{ CreateNoWindow = true })?.WaitForExit();
var triggerTime = DateTime.Now.AddMinutes(60).ToString("HH:mm:ss");
var ruArg = fullUser.StartsWith("AzureAD\\", StringComparison.OrdinalIgnoreCase)
? "/ru \"INTERACTIVE\""
: $"/ru \"{fullUser}\"";
var args = $"/create /tn \"{taskName}\" /tr \"\\\"{exePath}\\\" --rdp-capture {portStr} {screenIdx}\" " +
$"/sc ONCE /st {triggerTime} {ruArg} /it /f";
var p = Process.Start(new ProcessStartInfo("schtasks.exe", args)
{ CreateNoWindow = true, RedirectStandardError = true, UseShellExecute = false });
p?.WaitForExit();
if (p?.ExitCode != 0)
{
AgentWorker.Log($"RDP: schtasks create fehlgeschlagen (ExitCode={p?.ExitCode})");
return false;
}
Process.Start(new ProcessStartInfo("schtasks.exe", $"/run /tn \"{taskName}\"")
{ CreateNoWindow = true })?.WaitForExit();
// Aufräumen nach kurzer Zeit
_ = Task.Run(async () =>
{
await Task.Delay(5000);
Process.Start(new ProcessStartInfo("schtasks.exe", $"/delete /tn \"{taskName}\" /f")
{ CreateNoWindow = true })?.WaitForExit();
});
AgentWorker.Log($"RDP: Helper gestartet als '{fullUser}' (Task: {taskName})");
return true;
}
catch (Exception ex)
{
AgentWorker.Log($"RDP: SpawnHelper Fehler: {ex.Message}");
return false;
}
var pid = SessionSpawner.SpawnInUserSession(exePath, $"--rdp-capture {portStr} {screenIdx}");
return pid > 0;
}
}