我如何确定C＃中的进程的所有者？
我正在寻找一个名为“MyApp.exe”的进程，我想确保我得到了一个特定用户拥有的进程。
我使用下面的代码来获取进程的列表：
Process[] processes = Process.GetProcessesByName("MyApp"); 这给了我一个进程列表，但是在Process类中似乎没有确定谁拥有这个进程的方法？ 任何想法，我怎么能做到这一点？
您可以使用WMI来获取拥有某个特定进程的用户。 要使用WMI，您需要将对System.Management.dll的引用添加到您的项目中。
按进程ID：
public string GetProcessOwner(int processId) { string query = "Select * From Win32_Process Where ProcessID = " + processId; ManagementObjectSearcher searcher = new ManagementObjectSearcher(query); ManagementObjectCollection processList = searcher.Get(); foreach (ManagementObject obj in processList) { string[] argList = new string[] { string.Empty, string.Empty }; int returnVal = Convert.ToInt32(obj.InvokeMethod("GetOwner", argList)); if (returnVal == 0) { // return DOMAIN\user return argList[1] + "\\" + argList[0]; } } return "NO OWNER"; }
按进程名称 （仅查找第一个进程，相应调整）：
public string GetProcessOwner(string processName) { string query = "Select * from Win32_Process Where Name = \"" + processName + "\""; ManagementObjectSearcher searcher = new ManagementObjectSearcher(query); ManagementObjectCollection processList = searcher.Get(); foreach (ManagementObject obj in processList) { string[] argList = new string[] { string.Empty, string.Empty }; int returnVal = Convert.ToInt32(obj.InvokeMethod("GetOwner", argList)); if (returnVal == 0) { // return DOMAIN\user string owner = argList[1] + "\\" + argList[0]; return owner; } } return "NO OWNER"; }
由于WMI并不总是一种快速检索信息的方法，下面是本地P / Invoke方法：
失败时返回值为null 。 为了获得在SYSTEM用户下运行的进程的名字，你需要以pipe理员身份执行这个代码。
private static string GetProcessUser(Process process) { IntPtr processHandle = IntPtr.Zero; try { OpenProcessToken(process.Handle, 8, out processHandle); WindowsIdentity wi = new WindowsIdentity(processHandle); string user = wi.Name; return user.Contains(@"\") ? user.Substring(user.IndexOf(@"\") + 1) : user; } catch { return null; } finally { if (processHandle != IntPtr.Zero) { CloseHandle(processHandle); } } } [DllImport("advapi32.dll", SetLastError = true)] private static extern bool OpenProcessToken(IntPtr ProcessHandle, uint DesiredAccess, out IntPtr TokenHandle); [DllImport("kernel32.dll", SetLastError = true)] [return: MarshalAs(UnmanagedType.Bool)] private static extern bool CloseHandle(IntPtr hObject);
这里是非C＃扬声器的VB版本：
Function GetProcessOwner(ProcessName As String) As String Dim query = "Select * from Win32_Process Where Name = """ + ProcessName + """" Dim searcher = New ManagementObjectSearcher(query) Dim processList = searcher.Get() For Each obj As ManagementObject In processList Dim argList As String() = {String.Empty, String.Empty} Dim returnVal = Convert.ToInt32(obj.InvokeMethod("GetOwner", argList)) If returnVal = 0 Then ' return DOMAIN\user Dim owner = argList(1) + "\\" + argList(0) Return owner End If Next Return "NO OWNER" End Function Function GetProcessOwner(processId As Integer) As String Dim query = "Select * From Win32_Process Where ProcessID = " & processId Dim searcher = New ManagementObjectSearcher(query) Dim processList = searcher.Get() For Each obj As ManagementObject In processList Dim argList As String() = {String.Empty, String.Empty} Dim returnVal = Convert.ToInt32(obj.InvokeMethod("GetOwner", argList)) If returnVal = 0 Then ' return DOMAIN\user Return argList(1) + "\\" + argList(0) End If Next Return "NO OWNER" End Function
不幸的是，没有原生的.Net方法来获得stream程所有者。
看看这些可能的解决scheme：
添加对您的项目的引用：
System.Management
然后将以下方法添加到您的项目中：
public string GetProcessOwner(int processId) { string MethodResult = null; try { StringBuilder sb = new StringBuilder(); sb.Append(" SELECT "); sb.Append(" * "); sb.Append(" FROM "); sb.Append(" WIN32_PROCESS"); sb.Append(" WHERE "); sb.Append(" ProcessId = " + processId); string Query = sb.ToString(); ManagementObjectCollection Processes = new ManagementObjectSearcher(Query).Get(); foreach (ManagementObject Process in Processes) { string[] Args = new string[] { "", "" }; int ReturnCode = Convert.ToInt32(Process.InvokeMethod("GetOwner", Args)); switch(ReturnCode) { case 0: MethodResult = Args[1] + "\\" + Args[0]; break; default: MethodResult = "None"; break; } } } catch //(Exception ex) { //ex.HandleException(); } return MethodResult; }
然后添加这个方法：
public DataTable GetProcessTable() { DataTable MethodResult = null; try { List<Process> Processes = Process.GetProcesses().ToList<Process>(); DataTable dt = new DataTable(); dt.Columns.Add("Name", typeof(string)); dt.Columns["Name"].ReadOnly = true; dt.Columns.Add("Id", typeof(string)); dt.Columns["Id"].ReadOnly = true; dt.Columns.Add("Owner", typeof(string)); dt.Columns["Owner"].ReadOnly = true; foreach (Process p in Processes) { DataRow r = dt.NewRow(); bool Match = false; r["Id"] = p.Id.ToString(); r["Name"] = p.ProcessName; r["Owner"] = GetProcessOwner(p.Id); dt.Rows.Add(r); } MethodResult = dt; } catch //(Exception ex) { //ex.HandleException(); } return MethodResult; }
调用GetProcessTable（）为您提供了所有正在运行的进程的DataTable以及它们的Id和Name，这很方便，因为它可以用作DataGridView的Datasource参数。
让我知道如果你需要更多的领域添加到表中。
System.Security.Principal.WindowsIdentity.GetCurrent().Name
这是我发现的最简单的方法：
Process[] processes = Process.GetProcessesByName("MyApp"); foreach (Process process in processes) { string username = process.StartInfo.Environment["USERNAME"]; // do some stuff }
