Struct TokenCommand 

pub struct TokenCommand { /* private fields */ }

Builder for launching processes under a specified primary security token.

Implementations

impl TokenCommand

pub fn new(token: Token, desktop: Option<InteractiveDesktop>) -> Self

Create a new command builder bound to an elevated token and its target desktop context.

pub fn current_exe(self) -> Result<Self, ElevateError>

Set the target executable to the path of the current binary.

pub fn exe(self, path: impl AsRef<Path>) -> Self

Set a custom target executable path. Supports environment variables like %SystemRoot%.

Examples found in repository

examples/headless_cmd.rs (line 14)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Spawning headless background maintenance command...");

    // `headless_command()` automatically binds to a Session 0 TrustedInstaller token
    // with no desktop station attached, preventing any Session 0 DACL or access violations.
    headless_command()?
        .exe("%SystemRoot%\\System32\\cmd.exe")
        .args("cmd.exe /k whoami /groups")
        .spawn()?;

    println!("Headless process spawned successfully in Session 0.");
    Ok(())
}

examples/spawn_cmd.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Spawning an elevated Command Prompt...");

    // Standard interactive desktop:
    elevated_command()?
        .exe("%SystemRoot%\\System32\\cmd.exe")
        .args("cmd.exe /k whoami /groups")
        .spawn()?;

    // Tip: To target specific desktops (like the lock screen or a custom sandbox),
    // you can use `elevated_command_on`:
    //
    // elevated_command_on(InteractiveDesktop::Winlogon)?.exe(...).spawn()?;
    // elevated_command_on(InteractiveDesktop::custom("MyStation\\MyDesktop"))?.exe(...).spawn()?;

    println!("Elevated Command Prompt spawned successfully.");
    Ok(())
}

pub fn args(self, args: impl Into<String>) -> Self

Pass a raw command-line string to the process.

Examples found in repository

examples/headless_cmd.rs (line 15)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Spawning headless background maintenance command...");

    // `headless_command()` automatically binds to a Session 0 TrustedInstaller token
    // with no desktop station attached, preventing any Session 0 DACL or access violations.
    headless_command()?
        .exe("%SystemRoot%\\System32\\cmd.exe")
        .args("cmd.exe /k whoami /groups")
        .spawn()?;

    println!("Headless process spawned successfully in Session 0.");
    Ok(())
}

examples/spawn_cmd.rs (line 14)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Spawning an elevated Command Prompt...");

    // Standard interactive desktop:
    elevated_command()?
        .exe("%SystemRoot%\\System32\\cmd.exe")
        .args("cmd.exe /k whoami /groups")
        .spawn()?;

    // Tip: To target specific desktops (like the lock screen or a custom sandbox),
    // you can use `elevated_command_on`:
    //
    // elevated_command_on(InteractiveDesktop::Winlogon)?.exe(...).spawn()?;
    // elevated_command_on(InteractiveDesktop::custom("MyStation\\MyDesktop"))?.exe(...).spawn()?;

    println!("Elevated Command Prompt spawned successfully.");
    Ok(())
}

pub fn spawn(self) -> Result<(), ElevateError>

Spawn the process under the configured token context.

Examples found in repository

examples/headless_cmd.rs (line 16)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Spawning headless background maintenance command...");

    // `headless_command()` automatically binds to a Session 0 TrustedInstaller token
    // with no desktop station attached, preventing any Session 0 DACL or access violations.
    headless_command()?
        .exe("%SystemRoot%\\System32\\cmd.exe")
        .args("cmd.exe /k whoami /groups")
        .spawn()?;

    println!("Headless process spawned successfully in Session 0.");
    Ok(())
}

examples/spawn_cmd.rs (line 15)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    println!("Spawning an elevated Command Prompt...");

    // Standard interactive desktop:
    elevated_command()?
        .exe("%SystemRoot%\\System32\\cmd.exe")
        .args("cmd.exe /k whoami /groups")
        .spawn()?;

    // Tip: To target specific desktops (like the lock screen or a custom sandbox),
    // you can use `elevated_command_on`:
    //
    // elevated_command_on(InteractiveDesktop::Winlogon)?.exe(...).spawn()?;
    // elevated_command_on(InteractiveDesktop::custom("MyStation\\MyDesktop"))?.exe(...).spawn()?;

    println!("Elevated Command Prompt spawned successfully.");
    Ok(())
}