将用户名转换为C＃/。NET中的SID字符串

Question

有一个关于converting from a SID to an account name的问题;没有其他方法。

如何将用户名转换为SID字符串，例如，找出哪个HKEY_USERS子键与给定名称的用户有关？

Answer 1

该播客告诉我，我应该问，并回答，当他们没有回答这个问题时已经。开始。

最简单的方式，与.NET 2.0及以上，是这样的：

NTAccount f = new NTAccount("username"); 
SecurityIdentifier s = (SecurityIdentifier) f.Translate(typeof(SecurityIdentifier)); 
String sidString = s.ToString(); 

难的方法，当会不会其中工程，并适用于.NET 1.1也：

[DllImport("advapi32.dll", CharSet=CharSet.Auto, SetLastError=true)] 
public static extern bool LookupAccountName([In,MarshalAs(UnmanagedType.LPTStr)] string systemName, [In,MarshalAs(UnmanagedType.LPTStr)] string accountName, IntPtr sid, ref int cbSid, StringBuilder referencedDomainName, ref int cbReferencedDomainName, out int use); 

[DllImport("advapi32.dll", CharSet=CharSet.Auto, SetLastError=true)] 
internal static extern bool ConvertSidToStringSid(IntPtr sid, [In,Out,MarshalAs(UnmanagedType.LPTStr)] ref string pStringSid); 


/// <summary>The method converts object name (user, group) into SID string.</summary> 
/// <param name="name">Object name in form domain\object_name.</param> 
/// <returns>SID string.</returns> 
public static string GetSid(string name) { 
    IntPtr _sid = IntPtr.Zero; //pointer to binary form of SID string. 
    int _sidLength = 0; //size of SID buffer. 
    int _domainLength = 0; //size of domain name buffer. 
    int _use;  //type of object. 
    StringBuilder _domain = new StringBuilder(); //stringBuilder for domain name. 
    int _error = 0; 
    string _sidString = ""; 

    //first call of the function only returns the sizes of buffers (SDI, domain name) 
    LookupAccountName(null, name, _sid, ref _sidLength, _domain, ref _domainLength, out _use); 
    _error = Marshal.GetLastWin32Error(); 

    if (_error != 122) //error 122 (The data area passed to a system call is too small) - normal behaviour. 
    { 
     throw (new Exception(new Win32Exception(_error).Message)); 
    } else { 
     _domain = new StringBuilder(_domainLength); //allocates memory for domain name 
     _sid = Marshal.AllocHGlobal(_sidLength); //allocates memory for SID 
     bool _rc = LookupAccountName(null, name, _sid, ref _sidLength, _domain, ref _domainLength, out _use); 

     if (_rc == false) { 
      _error = Marshal.GetLastWin32Error(); 
      Marshal.FreeHGlobal(_sid); 
      throw (new Exception(new Win32Exception(_error).Message)); 
     } else { 
      // converts binary SID into string 
      _rc = ConvertSidToStringSid(_sid, ref _sidString); 

      if (_rc == false) { 
       _error = Marshal.GetLastWin32Error(); 
       Marshal.FreeHGlobal(_sid); 
       throw (new Exception(new Win32Exception(_error).Message)); 
      } else { 
       Marshal.FreeHGlobal(_sid); 
       return _sidString; 
      } 
     } 
    } 
} 

Answer 2

LookupAccountName()本地方法的优点是可以在远程机器上执行，而.NET方法不能远程执行。

虽然示例没有显示它LookupAccountName(null) < - 这是要在其上执行的远程系统。

Answer 3

using System; 
using System.Management; 
using System.Windows.Forms; 

namespace WMISample 
{ 
public class MyWMIQuery 
{ 
    public static void Main() 
    { 
     try 
     { 
      ManagementObjectSearcher searcher = 
       new ManagementObjectSearcher("root\\CIMV2", 
       "SELECT * FROM Win32_UserAccount where name='Galia'"); 

      foreach (ManagementObject queryObj in searcher.Get()) 
      { 
       Console.WriteLine("-----------------------------------"); 
       Console.WriteLine("Win32_UserAccount instance"); 
       Console.WriteLine("-----------------------------------"); 
       Console.WriteLine("Name: {0}", queryObj["Name"]); 
       Console.WriteLine("SID: {0}", queryObj["SID"]); 
      } 
     } 
     catch (ManagementException e) 
     { 
      MessageBox.Show("An error occurred while querying for WMI 
      data: " + e.Message); 
     } 
     } 
    } 
}