You can always start the process with a different identity that can restart the server:
var info = new ProcessStartInfo("shutdown.exe", "/r /t 0");
info.UserName = "accountWithAdminPermissions";
//A not-so-secure use of SecureString
var secureString = new SecureString();
var password = "abc123";
foreach (var letter in password)
{
secureString.AppendChar(letter);
}
info.Password = secureString;
var restart = new Process();
restart.StartInfo = info;
restart.Start();
If you just want to give a non-Administrative account the permission to restart the server:
- Open
secpol.msc
.
- Navigate to Local PoliciesUser Rights Assignment.
- Find
Shutdown The System
.
- Add the account.
This might be a good way of using an account for least privilege. That way you don't have to use a really big hammer like an account in the Administrator group.
Shutdown.exe
(I believe) always requires Administrator permissions. You can refer to this MSDN post on restarting the server without shutdown.exe.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…