We weren't using multi-threading either, but your code still runs on a
thread (even if it's the only one in the process), so it could still be
causing a problem. Read the "Pitfalls to watch for" section at
http://pluralsight.com/wiki/default....sImpersonation.
Note that I'm fairly certain that the suggestion to use
createprocessas user no longer works on SP2 - that's what caused me to
have to do a rewrite in the first place. This is documented on MSDN,
if you care to search for it.
OK...Here's the code that I'm 100% sure works. I've stripped out a lot
of the stuff that was implementation specific, but I think all the
pertinent parts are in here:
Impersonation class: This one does the actual installing and
uninstalling.
using System;
using System.Runtime. InteropServices ;
using System.Diagnost ics;
using System.Windows. Forms;
using System.Manageme nt;
using System.Collecti ons;
using ROOT.CIMV2.Win3 2;
namespace Extensions.Clie nt.ApplicationU pdater
{
public class Impersonate
{
[DllImport("adva pi32.dll", SetLastError=tr ue)]
private static extern bool LogonUser(Strin g lpszUsername, String
lpszDomain, String lpszPassword,
int dwLogonType, int dwLogonProvider , ref IntPtr phToken);
public static void UninstallProduc t(string productCode, string name,
string version)
{
//get error codes at
http://msdn.microsoft.com/library/de...rror_codes.asp
const int ERROR_SUCCESS_R EBOOT_REQUIRED = 3010;
const int ERROR_SUCCESS_R EBOOT_INITIATED = 1641;
const int ERROR_SUCCESS = 0;
uint retValue = 0;
try
{
ManagementScope scope = new ManagementScope ();
ROOT.CIMV2.Win3 2.Product prod = new Product(product Code, name,
version);
prod.Scope = scope;
retValue = prod.Uninstall( );
}
catch(Exception e)
{
MessageBox.Show ("Uninstall failed. Verify that " + name + " is
installed for all users on this machine. Details: " + e.Message);
}
if (retValue != ERROR_SUCCESS_R EBOOT_REQUIRED && retValue !=
ERROR_SUCCESS_R EBOOT_INITIATED && retValue != ERROR_SUCCESS)
{
MessageBox.Show ("Uninstall failed. Please contact helpdesk to get
updates. The returned error was: " + retValue);
}
}
public static void InstallProduct( string path, string options, bool
allUsers)
{
//get error codes at
http://msdn.microsoft.com/library/de...rror_codes.asp
uint retValue = 0;
const int ERROR_SUCCESS_R EBOOT_REQUIRED = 3010;
const int ERROR_SUCCESS_R EBOOT_INITIATED = 1641;
const int ERROR_SUCCESS = 0;
try
{
if (System.IO.File .Exists(path))
{
retValue = Product.Install (allUsers, options, path);
if (retValue != ERROR_SUCCESS_R EBOOT_REQUIRED && retValue !=
ERROR_SUCCESS_R EBOOT_INITIATED && retValue != ERROR_SUCCESS)
{
MessageBox.Show ("Install failed. Please contact helpdesk to get
updates. The returned error was: " + retValue);
}
}
else
MessageBox.Show ("Couldn't find file " + path + ". Please contact
helpdesk to get updates.");
}
catch(Exception e)
{
MessageBox.Show ("Install failed. Please contact helpdesk to get
updates. Details: " + e.Message);
}
}
public static IntPtr LogonUser(strin g UserName, string Password,
string Domain)
{
IntPtr token = IntPtr.Zero;
try
{
// Call LogonUser to obtain a handle to an access token.
LogonUser(UserN ame, Domain, Password, 2, 1, ref token);
return token;
}
catch
{
return IntPtr.Zero;
}
}
}
}
And here how the impersonation class was used to actually install the
product:
private void Install()
{
try
{
if (!System.IO.Fil e.Exists(this.m siPath))
{
MessageBox.Show ("Could not find the installation file " +
this.msiPath + ". Please contact the helpdesk to get updates.", "New
version of " + this.applicatio nTitle + " not found.");
return;
}
StatusWindow statusForm = null;
statusForm = new StatusWindow();
statusForm.Stat us = "Preparing to install " + this.applicatio nTitle +
"...";
statusForm.Show ();
statusForm.Stat us = "Logging On...";
statusForm.Perf ormStep();
IntPtr token = Impersonate.Log onUser(UserName , Password, Domain);
if (token != IntPtr.Zero)
{
WindowsIdentity newId = new WindowsIdentity (token);
WindowsImperson ationContext impersonatedUse r = newId.Impersona te();
//EVERTHING YOU DO FROM HERE ON OUT IS IMPERSONATED
//You probably can ignore all this productCode stuff...It's a long
story. But if your MSI is set to remove previous versions, you don't
need this.
if (this.productCo de != null && this.productCod e.Length > 0)
{
statusForm.Stat us = "Uninstalli ng old version of " +
this.applicatio nTitle + " ...";
statusForm.Perf ormStep();
Impersonate.Uni nstallProduct(t his.productCode ,
this.applicatio nTitle, this.oldVersion );
}
statusForm.Stat us = "Installing new version of " +
this.applicatio nTitle + "...";
statusForm.Perf ormStep();
//The second parameter are the options sent to msiexec.
Impersonate.Ins tallProduct(thi s.msiPath, "REBOOT=R", true);
impersonatedUse r.Undo();
//BACK TO RUNNING UNDER THE ORIGINAL USER
}
else
{
MessageBox.Show ("Impersonat e user failed. Please contact HelpDesk
to obtain the latest version.");
}
statusForm.Clos e();
}
catch(Exception e)
{
MessageBox.Show (this.applicati onTitle + " update failed: " + e);
WriteEvent(e);
}
}
I'll look around for the example of doing it with a process.
Good luck,
Jared
