BorlandTalk.com

Arnie · Guest

I'll try to make a long story short.

We have a service running on a server. It runs under the LOCALSYSTEM
acount. It periodically looks in a DB table for work to do. The work
entails starting a process along with some input parameters. It uses
CreateProcess() to start the new process. This all works fine. The new
process can be seen running under the SYSTEM account in Task Manager.

Now, a user logs into the server and runs our client software (on the
server). They cause an entry to be made in the DB table. Our service finds
the entry starts the appropriate process. The user then logs off and the
process is killed.

We're using SetConsoleControlHandler() to set up handling in the new
process. It gets called with a CTRL_LOGOFF_EVENT and we make a log entry.
That's how we know what's happening.

I had assumed that this would only happen if the user starting the process
logged off. Am I wrong?

- Arnie