1.5w+
社区成员
- 全部
- VC综合技术
- 互联网技术
- MFC AppLauncher
- .NET 技术
- 界面
- 进程
- 算法
- 硬件/系统
- 数据库
- VC++技术资源
如何在程序中判断一个user是不是win2000的administrators组的？
我想写个程序，在win2000中判断当前用户是不是管理员组的用户？
谢谢！
请各位朋友指教！
谢谢！
请各位朋友指教！
...全文
当前发帖距今超过3年，不再开放新的回复
发表回复
gboy 2001-07-18
gz
ahphone 2001-07-18
啊？你的MSDN是哪个版本的？NetUserGetGroups也可以的。我贴MSDN的参考代码了！
NetUserGetLocalGroups
The NetUserGetLocalGroups function retrieves a list of local groups to which a specified user belongs.
Security Requirements
Windows NT: Only authenticated users can successfully execute the NetUserGetLocalGroups function.
Windows 2000: If you call this function on a Windows 2000 domain controller that is running Active Directory, access is allowed or denied based on the access-control list (ACL) for the securable object. The default ACL permits all authenticated users and members of the "Pre-Windows 2000 compatible access" group to view the information. By default, the "Pre-Windows 2000 compatible access" group includes Everyone as a member. This enables anonymous access to the information if the system allows anonymous access.
If you call this function on a Windows 2000 member server or workstation, all authenticated users can view the information. Anonymous access is also permitted if the RestrictAnonymous policy setting allows anonymous access.
For more information about restricting anonymous access, see Security Requirements for the Network Management Functions.
NET_API_STATUS NetUserGetLocalGroups(
LPCWSTR servername,
LPCWSTR username,
DWORD level,
DWORD flags,
LPBYTE *bufptr,
DWORD prefmaxlen,
LPDWORD entriesread,
LPDWORD totalentries
);
Parameters
servername
[in] Pointer to a constant Unicode string specifying the name of the remote server on which the function is to execute. The string must begin with \\. If this parameter is NULL, the local computer is used.
username
[in] Pointer to a constant Unicode string specifying the name of the user for which to return local group membership information. If the string is of the form DomainName\UserName the user name is expected to be found on that domain. If the string is of the form UserName, the user name is expected to be found on the server specified by the servername parameter.
level
[in] Specifies the information level of the data. This parameter can be the following value. Value Meaning
0 Return the names of the local groups to which the user belongs. The bufptr parameter points to an array of LOCALGROUP_USERS_INFO_0 structures.
flags
[in] Specifies a bitmask of flags. Currently, only the value LG_INCLUDE_INDIRECT is defined. If this bit is set, the function also returns the names of the local groups in which the user is indirectly a member (that is, the user has membership in a global group that is itself a member of one or more local groups).
bufptr
[out] Pointer to the buffer that receives the data. The format of this data depends on the value of the level parameter. This buffer is allocated by the system and must be freed using the NetApiBufferFree function. Note that you must free the buffer even if the function fails with ERROR_MORE_DATA.
prefmaxlen
[in] Specifies the preferred maximum length of returned data, in bytes. If you specify MAX_PREFERRED_LENGTH, the function allocates the amount of memory required for the data. If you specify another value in this parameter, it can restrict the number of bytes that the function returns. If the buffer size is insufficient to hold all entries, the function returns ERROR_MORE_DATA. For more information, see Network Management Function Buffers and Network Management Function Buffer Lengths.
entriesread
[out] Pointer to a DWORD value that receives the count of elements actually enumerated.
totalentries
[out] Pointer to a DWORD value that receives the total number of entries that could have been enumerated.
Return Values
If the function succeeds, the return value is NERR_Success.
If the function fails, the return value can be one of the following error codes.
Value Meaning
ERROR_ACCESS_DENIED The user does not have access to the requested information.
ERROR_MORE_DATA More entries are available. Specify a large enough buffer to receive all entries.
NERR_InvalidComputer The computer name is invalid.
NERR_UserNotFound The user name could not be found.
Remarks
To retrieve a list of global groups to which a specified user belongs, you can call the NetUserGetGroups function.
The following code sample demonstrates how to retrieve a list of the local groups to which a user belongs with a call to the NetUserGetLocalGroups function. The sample calls NetUserGetLocalGroups, specifying information level 0 (LOCALGROUP_USERS_INFO_0). The sample loops through the entries and prints the name of each local group in which the user has membership. If all available entries are not enumerated, it also prints the number of entries actually enumerated and the total number of entries available. Finally, the code sample frees the memory allocated for the information buffer.
#ifndef UNICODE
#define UNICODE
#endif
#include <stdio.h>
#include <assert.h>
#include <windows.h>
#include <lm.h>
int wmain(int argc, wchar_t *argv[])
{
LPLOCALGROUP_USERS_INFO_0 pBuf = NULL;
DWORD dwLevel = 0;
DWORD dwFlags = LG_INCLUDE_INDIRECT ;
DWORD dwPrefMaxLen = -1;
DWORD dwEntriesRead = 0;
DWORD dwTotalEntries = 0;
NET_API_STATUS nStatus;
if (argc != 3)
{
fwprintf(stderr, L"Usage: %s \\\\ServerName UserName\n", argv[0]);
exit(1);
}
//
// Call the NetUserGetLocalGroups function
// specifying information level 0.
//
// The LG_INCLUDE_INDIRECT flag specifies that the
// function should also return the names of the local
// groups in which the user is indirectly a member.
//
nStatus = NetUserGetLocalGroups(argv[1],
argv[2],
dwLevel,
dwFlags,
(LPBYTE *) &pBuf,
dwPrefMaxLen,
&dwEntriesRead,
&dwTotalEntries);
//
// If the call succeeds,
//
if (nStatus == NERR_Success)
{
LPLOCALGROUP_USERS_INFO_0 pTmpBuf;
DWORD i;
DWORD dwTotalCount = 0;
if ((pTmpBuf = pBuf) != NULL)
{
fprintf(stderr, "\nLocal group(s):\n");
//
// Loop through the entries and
// print the names of the local groups
// to which the user belongs.
//
for (i = 0; i < dwEntriesRead; i++)
{
assert(pTmpBuf != NULL);
if (pTmpBuf == NULL)
{
fprintf(stderr, "An access violation has occurred\n");
break;
}
wprintf(L"\t-- %s\n", pTmpBuf->lgrui0_name);
pTmpBuf++;
dwTotalCount++;
}
}
//
// If all available entries were
// not enumerated, print the number actually
// enumerated and the total number available.
//
if (dwEntriesRead < dwTotalEntries)
fprintf(stderr, "\nTotal entries: %d", dwTotalEntries);
//
// Otherwise, just print the total.
//
printf("\nEntries enumerated: %d\n", dwTotalCount);
}
else
fprintf(stderr, "A system error has occurred: %d\n", nStatus);
//
// Free the allocated memory.
//
if (pBuf != NULL)
NetApiBufferFree(pBuf);
return 0;
}
If you are programming for Active Directory, you may be able to call certain Active Directory Service Interface (ADSI) methods to achieve the same functionality you can achieve by calling the network management user functions. For more information, see IADsUser and IADsComputer.
Requirements
Windows NT/2000: Requires Windows NT 3.1 or later.
Windows 95/98: Unsupported.
Header: Declared in Lmaccess.h; include Lm.h.
Library: Use Netapi32.lib.
NetUserGetLocalGroups
The NetUserGetLocalGroups function retrieves a list of local groups to which a specified user belongs.
Security Requirements
Windows NT: Only authenticated users can successfully execute the NetUserGetLocalGroups function.
Windows 2000: If you call this function on a Windows 2000 domain controller that is running Active Directory, access is allowed or denied based on the access-control list (ACL) for the securable object. The default ACL permits all authenticated users and members of the "Pre-Windows 2000 compatible access" group to view the information. By default, the "Pre-Windows 2000 compatible access" group includes Everyone as a member. This enables anonymous access to the information if the system allows anonymous access.
If you call this function on a Windows 2000 member server or workstation, all authenticated users can view the information. Anonymous access is also permitted if the RestrictAnonymous policy setting allows anonymous access.
For more information about restricting anonymous access, see Security Requirements for the Network Management Functions.
NET_API_STATUS NetUserGetLocalGroups(
LPCWSTR servername,
LPCWSTR username,
DWORD level,
DWORD flags,
LPBYTE *bufptr,
DWORD prefmaxlen,
LPDWORD entriesread,
LPDWORD totalentries
);
Parameters
servername
[in] Pointer to a constant Unicode string specifying the name of the remote server on which the function is to execute. The string must begin with \\. If this parameter is NULL, the local computer is used.
username
[in] Pointer to a constant Unicode string specifying the name of the user for which to return local group membership information. If the string is of the form DomainName\UserName the user name is expected to be found on that domain. If the string is of the form UserName, the user name is expected to be found on the server specified by the servername parameter.
level
[in] Specifies the information level of the data. This parameter can be the following value. Value Meaning
0 Return the names of the local groups to which the user belongs. The bufptr parameter points to an array of LOCALGROUP_USERS_INFO_0 structures.
flags
[in] Specifies a bitmask of flags. Currently, only the value LG_INCLUDE_INDIRECT is defined. If this bit is set, the function also returns the names of the local groups in which the user is indirectly a member (that is, the user has membership in a global group that is itself a member of one or more local groups).
bufptr
[out] Pointer to the buffer that receives the data. The format of this data depends on the value of the level parameter. This buffer is allocated by the system and must be freed using the NetApiBufferFree function. Note that you must free the buffer even if the function fails with ERROR_MORE_DATA.
prefmaxlen
[in] Specifies the preferred maximum length of returned data, in bytes. If you specify MAX_PREFERRED_LENGTH, the function allocates the amount of memory required for the data. If you specify another value in this parameter, it can restrict the number of bytes that the function returns. If the buffer size is insufficient to hold all entries, the function returns ERROR_MORE_DATA. For more information, see Network Management Function Buffers and Network Management Function Buffer Lengths.
entriesread
[out] Pointer to a DWORD value that receives the count of elements actually enumerated.
totalentries
[out] Pointer to a DWORD value that receives the total number of entries that could have been enumerated.
Return Values
If the function succeeds, the return value is NERR_Success.
If the function fails, the return value can be one of the following error codes.
Value Meaning
ERROR_ACCESS_DENIED The user does not have access to the requested information.
ERROR_MORE_DATA More entries are available. Specify a large enough buffer to receive all entries.
NERR_InvalidComputer The computer name is invalid.
NERR_UserNotFound The user name could not be found.
Remarks
To retrieve a list of global groups to which a specified user belongs, you can call the NetUserGetGroups function.
The following code sample demonstrates how to retrieve a list of the local groups to which a user belongs with a call to the NetUserGetLocalGroups function. The sample calls NetUserGetLocalGroups, specifying information level 0 (LOCALGROUP_USERS_INFO_0). The sample loops through the entries and prints the name of each local group in which the user has membership. If all available entries are not enumerated, it also prints the number of entries actually enumerated and the total number of entries available. Finally, the code sample frees the memory allocated for the information buffer.
#ifndef UNICODE
#define UNICODE
#endif
#include <stdio.h>
#include <assert.h>
#include <windows.h>
#include <lm.h>
int wmain(int argc, wchar_t *argv[])
{
LPLOCALGROUP_USERS_INFO_0 pBuf = NULL;
DWORD dwLevel = 0;
DWORD dwFlags = LG_INCLUDE_INDIRECT ;
DWORD dwPrefMaxLen = -1;
DWORD dwEntriesRead = 0;
DWORD dwTotalEntries = 0;
NET_API_STATUS nStatus;
if (argc != 3)
{
fwprintf(stderr, L"Usage: %s \\\\ServerName UserName\n", argv[0]);
exit(1);
}
//
// Call the NetUserGetLocalGroups function
// specifying information level 0.
//
// The LG_INCLUDE_INDIRECT flag specifies that the
// function should also return the names of the local
// groups in which the user is indirectly a member.
//
nStatus = NetUserGetLocalGroups(argv[1],
argv[2],
dwLevel,
dwFlags,
(LPBYTE *) &pBuf,
dwPrefMaxLen,
&dwEntriesRead,
&dwTotalEntries);
//
// If the call succeeds,
//
if (nStatus == NERR_Success)
{
LPLOCALGROUP_USERS_INFO_0 pTmpBuf;
DWORD i;
DWORD dwTotalCount = 0;
if ((pTmpBuf = pBuf) != NULL)
{
fprintf(stderr, "\nLocal group(s):\n");
//
// Loop through the entries and
// print the names of the local groups
// to which the user belongs.
//
for (i = 0; i < dwEntriesRead; i++)
{
assert(pTmpBuf != NULL);
if (pTmpBuf == NULL)
{
fprintf(stderr, "An access violation has occurred\n");
break;
}
wprintf(L"\t-- %s\n", pTmpBuf->lgrui0_name);
pTmpBuf++;
dwTotalCount++;
}
}
//
// If all available entries were
// not enumerated, print the number actually
// enumerated and the total number available.
//
if (dwEntriesRead < dwTotalEntries)
fprintf(stderr, "\nTotal entries: %d", dwTotalEntries);
//
// Otherwise, just print the total.
//
printf("\nEntries enumerated: %d\n", dwTotalCount);
}
else
fprintf(stderr, "A system error has occurred: %d\n", nStatus);
//
// Free the allocated memory.
//
if (pBuf != NULL)
NetApiBufferFree(pBuf);
return 0;
}
If you are programming for Active Directory, you may be able to call certain Active Directory Service Interface (ADSI) methods to achieve the same functionality you can achieve by calling the network management user functions. For more information, see IADsUser and IADsComputer.
Requirements
Windows NT/2000: Requires Windows NT 3.1 or later.
Windows 95/98: Unsupported.
Header: Declared in Lmaccess.h; include Lm.h.
Library: Use Netapi32.lib.
yes_start 2001-07-18
这个问题不错，我也想知道
sean 2001-07-18
ahphone(阿丰) :能不能详细一些呀！
ahphone 2001-07-18
NetUserGetLocalGroups
The NetUserGetLocalGroups function retrieves a list of local groups to which a specified user belongs.
The NetUserGetLocalGroups function retrieves a list of local groups to which a specified user belongs.
怎样才能让域用户获得win2000 终端的本地的administrators组的权限？ 在那台终端上我用一个具有domain admins组权限的域用户登陆到域。但是，在那台终端上，我不能修改日期、安装软件、修改系统，我估计在这台终端上只有本地user的权限。后来我将这个域用户加入到那台终端的本地...
急，如何在win2000中添加用户？ Dim Container As Object, newUser As Object, Group As Object Set Container = GetObject("WinNT://" + Trim(pc_name)) ...") frmSTATUS.Label1.Caption = "完成新增用户" 在某些win2000下行，在否些中不行，why?....
谈谈组策略在注册表中的位置--巨细讲解-大牛编程吧 经常使用Windows的用户都知道组策略和注册表，这两个功能是我们经常使用的，而组策略修改的本质就是在修改注册表的键值。小编对此收集了一些组策略对应的注册表位置详解。为了方便进行Ctrl+F查找，这边就不分页了，...
如何在WIN2000/XP中建立隐藏的超级用户 一、如何在图形界面建立隐藏的超级用户 图形界面下适用本地或开3389终端服务的肉鸡上。上面我提到的那位作者说的方法很好，但是较为 复杂，还要用到psu.exe(让程序以系统用户身份运行的程序），如果在肉鸡上的话...
在windows上使用win2000资源工具 一 windows 2000资源工具 These utilities can help you streamline administrative tasks such as managing Active Directory, administering security features, working with Group Policy and Terminal ...
想把你的计算机给别人用？先创建个新用户吧 ———— 用户与组管理 每一个用户登录系统后，拥有不同的操作权限。 每个账户有自己唯一的SID（安全标识符） 用户SID：S-1-5-21-426206823-2579496042-14852678-500 系统SID：S-1-5-21-426206823-2579496042-14852678 用户UID：500 ...
通用组、全局组、本地域组的区别 1、本地域组：多域用户访问单域资源（访问同一个域） 本地域组的成员可包括Windows Server2003、Windows 2000或WindowsNT域中的其他组和账户，而且只能在其所在域内指派权限。 2、全局组： 单域用户访问多域...
怎样在两个局域网内共享一台打印机 。常用网络命令及命令实例详解 我们公司有两间办公室，原先布线的时候用一个路由器延伸出多个接口预埋在墙里并做上插头，IP地址是自动分配的，网关是192.168.0.1，但是由于另一间办公室内墙上插口不够用，所以又用墙上的插口另加了一个路由器，ip...
Win2000、NT 环境真正 RPL 无盘 WIN98 安装指南（转） 一、安装 NT 或 Win2000 服务器 在服务器上安装 NT4.0、服务器名建议为 W98SERVER 。必须安装 TCP/IP、IPX、NETBEUI、DLC 协议，其中 IP 地址要指定，如: 192.168.0.1，掩...
问一个关于Win2000下文件夹访问权限的问题！ 现在我为了能够通过程序访问该文件夹下的所有Log档案而在系统中创建了一个名为"LogReader"的User级用户 ，用户"LogReader"仅对文件夹"UserLog"及其下文件具备"读取"的权限。 开始的时候，通过用户"LogReader"可以...
在Win2000中访问注册表问题。 我以超级用户登录， 用程序在注册表中写了几个键值， 然后用普通用户登录后， 却打不开这个键值，为什么？ 我应该怎么做？ 程序如下： OURWAYKEY = '\Software\Ourway Software'; SYSSETKEY = '\HuiLongERP'; ...
系统安全：Win2000系统中几个攻击实例之成败心得 比如说，你用一般用户的账号登录Windows NT/Windows 2000后，你就只能作有限的操作，却不能加减用户，不能往系统目录中存写文件等等；但等到你通过系统的漏洞获得了Administrator或者Local System的权限以后，你也就...
Win2000计算机启动/关机脚本 深入浅出Win2000计算机启动/关机脚本 <...一.... Win2000计算机启动/关机脚本(startup/shutdown scripts)是Win2000的一个新特点.启动脚本是邀请用户登录之前运行的批文件,它的功能...
组策略对应注册表位置详细解读 经常使用Windows的用户都知道组策略和注册表，这两个功能是我们经常使用的，而组策略修改的本质就是在修改注册表的键值。小编对此收集了一些组策略对应的注册表位置详解。为了方便进行Ctrl+F查找，这边就不分页了，...
用WIN2000做4F 2006年11月06日 21:27 我的文章现在很多人用WIN2000做4F，也有不少人的4F被黑过，其实大多数4F被黑，不是什么版本后门，而是你的电脑系统被黑客入侵了，下面我会给大家详细的讲解防范措施Windows2000 含有很多的安全...
组策略对应注册表位置部分解读 在域环境中，管理员经常要执行的操作就是编辑应用域策略，对域环境中成员主机进行集中管理，但是有时候会存在这样的问题，某项策略配置应用生效后，导致了域成员主机部分功能异常，但是直接撤销域策略，验证时不生效...
手工删除Win2000/XP/2003中guest账号(转) 手工删除Win2000/XP/2003中guest账号(转)[@more@] 我们知道，在NT技术架构的Windows系统中，有一个系统内置的权限较低的匿名访问账号guest，我们经常会遇到在win2000和xp系统中设置了共...
问一个关于win2000计划任务的问题，急！！！ s 的一个命令， shutdon.exe是从xp系统拷贝过来用来关机的，因为制定计划任务时是需要指定一个用户的，但这个用户是user用户时不能运行这个计划，没任何反映，而我把这个用户指定成administrators时，就可以执行了，...
Win2000中安全模版中ACL的格式浅析 Win2000中安全模版中ACL的格式浅析 Batman 本文主要介绍NT系统中ACL（访问控制列表）的用法和变量的说明，在NTFS的分区上， ACL是用来控制对象的访问权限或对象的审核机制的一个控制列表，由于NT一般的图形 模式，...
jsp拿不到回显数据_渗透mysql数据库总结 一、sqlshell获取要利用mysql首先得拿到一个可以执行sql的mysql才能利用，下面就说一下几种常见姿势，欢迎补充。1、弱口令这个比较简单，网上工具很多如美杜莎，九头蛇这些比较知名的，msf也有相应的模块。我自己...
【收藏】深入浅出Win2000计算机启动 关机脚本 简介 Win2000计算机启动/关机脚本(startup/shutdown scripts)是Win2000的一个新特点.启动脚本是邀请用户登录之前运行的批文件,它的功能类似于Win9X和DOS中的自动执行批处理文件autoexec.bat;关机脚本是计算机关机...
Win2000/windows 2003/xp 网络命令应用大全 Win2000/windows 2003/xp 网络命令应用大全1】ping用来测试网络是否建立连接，获取ip地址，也可以用来攻击ping -l 65500 -t 127.0.0.0...a查看自己开的端口，常常用来手工查看是否中了木马，或者黑客程序3】netstat -n
win2000常用网络命令[整理中] 只有在安装 TCP/IP 协议之后才能使用该命令。ping [-t] [-a] [-n count] [-l length] [-f] [-i ttl] [-v tos] [-r count] [-s count] [-j computer-list] [-k computer-list] [-w timeout] destination-list 参数
敏捷软件开发－原则、模式与实践.pdf 本书讲授了一些原则、模式以及实践，它们可以帮助软件开发人员在追求美的程序、设计以及团队的道路上迈出第一步。本书探索了基本的设计原则，软件设计结构的通用模式以及有利于团队融为一个有机整体的一系列实践。本书包含了许多代码，仔细研读这些代码是学习本书所教授的原则、模式及时间的最有效方法
C语言及程序设计初步 课程针对没有任何程序设计基础的初学者，全面介绍C语言及利用C语言进行程序设计的方法。课程注重知识的传授，更关注学习者能够通过实践的方式，真正学会利用C语言解决问题，奠定程序设计的基础。为此，专门设计了实践方案，指导学习者在听讲的同时，有效完成实践。讲课中还适时穿插进行学习指导，帮助初学者尽快掌握程序设计的学习方法。 课程主要针对无任何编程经历的初学者，利用主讲者多年来教授大一学生的教学经验，准确把握知识点掌握中的难点，在和视频配套的实践方案配合下，帮助初学者顺利掌握知识，获得学习中的自信。
juniper路由器学习资料 从网络搜集的关于juniper的资源，包含
fru-mx960-acoustic.pdf
fru-mx960-cable-manager.pdf
JNCIA_学习指南中文.pdf
Juniper_EX交换机中文操作手册V1.0.pdf
Juniper_MX_路由器介绍.pdf
Juniper_MX960配置模板v1.2.docx
Juniper_netscreen.ppt
Juniper路由器（M10i）配置手册.pdf
Juniper路由器命令行配置手册.pdf
Juniper路由器实验手册.pdf
junos-cli.pdf
junos-release-notes-13.3.pdf
mx960-hwguide.pdf
mx960-install-quick-start.pdf
MX960操作维护介绍.pdf
MX960路由器操作手册.pdf
mx-series-line-card-guide.pdf
中国象棋人工智能论文集 这是本人收集的有关中国象棋人工智能的论文集
2009计算机博弈专辑文章.pdf
Computer Games Are an Efficient Tool for Event Game Theory.pdf
MINORS HASH TABLE IN COMPUTER CHINESE CHESS.pdf
中国象棋机器博弈的时间自适应分配策略研究.pdf
中国象棋计算机博弈中搜索算法的研究与改进.pdf
中国象棋计算机博弈关键技术分析.pdf
人工神经元网络结合TD(λ)算法在中国象棋机器博弈中的应用.pdf
博弈论的里程碑成果与局限性分析.pdf
基于剪枝策略的中国象棋搜索引擎研究.pdf
基于机器博弈的作战模拟系统探讨.pdf
大师级象棋机器人研究与开发.pdf
机器博弈研究面临的各种挑战.pdf
棋牌游戏与事件对策.pdf
积极开展民间棋类的计算机博弈活动.pdf
解剖大象的眼睛-中国象棋开发.pdf
计算机博弈原理与方法学概述.pdf
