BUG: WTSSetUserConfig() May Modify a User's Remote Access Permission (277631)

RESOLUTION

To work around this problem, a program can explicitly set the user's dial-in settings prior to calling WTSSetUserConfig(). The Remote Access Service (RAS) APIs can be used for this purpose. The following sample code demonstrates how to do this.

Sample Code

The following code uses the RAS function MprAdminUserGetInfo() to retrieve a user's current dial-in settings. Then a call to MprAdminUserSetInfo() is made to explicitly store these settings. If this is the first time that the settings have been explicitly set, the Active Directory structure that contains dial-in settings will be initialized, thereby preventing future WTSSetUserConfig() calls from altering the settings.

#define UNICODE
#define _UNICODE

#include <windows.h>
#include <stdio.h>
#include <mprapi.h>   // must be linked with mprapi.lib

void wmain(int argc, WCHAR *argv[]) {

   WCHAR szUser[UNLEN + 1];
   WCHAR szDomain[DNLEN + 1];
   WCHAR szUasServer[UNCLEN + 1];
   DWORD dwResult;

   // We must use the RAS_USER_1 structure to preserve all 
   // Windows 2000 remote access permission attributes
   RAS_USER_1 ru1;   

   if (argc < 3) {
      wprintf(L"usage: %s <user> <domain>\n", argv[0]);
      return;
   }

   wcscpy(szUser, argv[1]);
   wcscpy(szDomain, argv[2]);
   
   // Retrieve the name of the server with the User Accounts Subsystem
   dwResult = MprAdminGetPDCServer(szDomain, NULL, (PWSTR) szUasServer);
   if (dwResult != NO_ERROR) {
      wprintf(L"MprAdminGetPDCServer() failed. Error %d\n", dwResult);
      return;
   }

   // Retrieve the user's current dial-in settings
   dwResult = MprAdminUserGetInfo(szUasServer, szUser, 1, (PBYTE) &ru1);
   if (dwResult != NO_ERROR) {
      wprintf(L"MprAdminUserGetInfo() failed. Error %d\n", dwResult);
      return;
   }

   // Explicitly reset the user's dial-in settings
   dwResult = MprAdminUserSetInfo(szUasServer, szUser, 1, (PBYTE) &ru1);
   if (dwResult != NO_ERROR) {
      wprintf(L"MprAdminUserSetInfo() failed. Error %d\n", dwResult);
      return;
   }

   // Now it is safe to call WTSSetUserConfig()

  return;
}