|
|
//+---------------------------------------------------------------------------
//
// Microsoft Windows
// Copyright (C) Microsoft Corporation, 2001-2002.
//
// File: EFSGeneralPropertyPage.cpp
//
// Contents: Implementation of CEFSGeneralPropertyPage
//
//----------------------------------------------------------------------------
// EFSGeneralPropertyPage.cpp : implementation file
//
#include "stdafx.h"
#include <gpedit.h>
#include "EFSGeneralPropertyPage.h"
#include "compdata.h"
#ifdef _DEBUG
#define new DEBUG_NEW
#undef THIS_FILE
static char THIS_FILE[] = __FILE__; #endif
extern GUID g_guidExtension; extern GUID g_guidRegExt; extern GUID g_guidSnapin;
/////////////////////////////////////////////////////////////////////////////
// CEFSGeneralPropertyPage property page
CEFSGeneralPropertyPage::CEFSGeneralPropertyPage(CCertMgrComponentData* pCompData, bool bIsMachine) : CHelpPropertyPage(CEFSGeneralPropertyPage::IDD), m_bIsMachine (bIsMachine), m_hGroupPolicyKey (0), m_pGPEInformation (pCompData ? pCompData->GetGPEInformation () : 0), m_pCompData (pCompData), m_bDirty (false) { //{{AFX_DATA_INIT(CEFSGeneralPropertyPage)
// NOTE: the ClassWizard will add member initialization here
//}}AFX_DATA_INIT
if ( m_pCompData ) m_pCompData->AddRef ();
if ( m_pGPEInformation ) { HRESULT hResult = m_pGPEInformation->GetRegistryKey (m_bIsMachine ? GPO_SECTION_MACHINE : GPO_SECTION_USER, &m_hGroupPolicyKey); ASSERT (SUCCEEDED (hResult)); } }
CEFSGeneralPropertyPage::~CEFSGeneralPropertyPage() { if ( m_pCompData ) m_pCompData->Release (); }
void CEFSGeneralPropertyPage::DoDataExchange(CDataExchange* pDX) { CHelpPropertyPage::DoDataExchange(pDX); //{{AFX_DATA_MAP(CEFSGeneralPropertyPage)
// NOTE: the ClassWizard will add DDX and DDV calls here
//}}AFX_DATA_MAP
}
BEGIN_MESSAGE_MAP(CEFSGeneralPropertyPage, CHelpPropertyPage) //{{AFX_MSG_MAP(CEFSGeneralPropertyPage)
ON_BN_CLICKED(IDC_TURN_ON_EFS, OnTurnOnEfs) //}}AFX_MSG_MAP
END_MESSAGE_MAP()
/////////////////////////////////////////////////////////////////////////////
// CEFSGeneralPropertyPage message handlers
BOOL CEFSGeneralPropertyPage::OnInitDialog() { CHelpPropertyPage::OnInitDialog(); // The regkey to disable EFS is:
// HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\EFS\EfsConfiguration DWORD 0x00000001 =>Disable EFS
// If this is the RSOP, make it read-only
if ( !m_pGPEInformation ) { // Make the page read-only
GetDlgItem (IDC_TURN_ON_EFS)->EnableWindow (FALSE);
RSOPGetEFSFlags (); } else { GPEGetEFSFlags (); } return TRUE; // return TRUE unless you set the focus to a control
// EXCEPTION: OCX Property Pages should return FALSE
}
void CEFSGeneralPropertyPage::GPEGetEFSFlags() {
HKEY hKey = 0; LONG lResult = ::RegOpenKeyEx (m_hGroupPolicyKey, // handle to open key
EFS_SETTINGS_REGPATH, // subkey name
0, // reserved
KEY_READ, // security access mask
&hKey); // handle to open key
if ( ERROR_SUCCESS == lResult ) { // Read value
DWORD dwType = REG_DWORD; DWORD dwData = 0; DWORD cbData = sizeof (dwData);
// security review 2/22/2002 BryanWal ok
lResult = ::RegQueryValueEx (hKey, // handle of key to query
EFS_SETTINGS_REGVALUE, // address of name of value to query
0, // reserved
&dwType, // address of buffer for value type
(LPBYTE) &dwData, // address of data buffer
&cbData); // address of data buffer size);
ASSERT ((ERROR_SUCCESS == lResult && REG_DWORD == dwType) || ERROR_FILE_NOT_FOUND == lResult); if ( (ERROR_SUCCESS == lResult && REG_DWORD == dwType) || ERROR_FILE_NOT_FOUND == lResult ) { if ( 0 == dwData ) // 0 means enable EFS
SendDlgItemMessage (IDC_TURN_ON_EFS, BM_SETCHECK, BST_CHECKED); } else DisplaySystemError (NULL, lResult);
::RegCloseKey (hKey); } else // no key means EFS enabled
SendDlgItemMessage (IDC_TURN_ON_EFS, BM_SETCHECK, BST_CHECKED); }
void CEFSGeneralPropertyPage::DoContextHelp (HWND hWndControl) { _TRACE (1, L"Entering CEFSGeneralPropertyPage::DoContextHelp\n"); static const DWORD help_map[] = { IDC_TURN_ON_EFS, IDH_TURN_ON_EFS, 0, 0 };
switch (::GetDlgCtrlID (hWndControl)) { case IDC_TURN_ON_EFS: if ( !::WinHelp ( hWndControl, GetF1HelpFilename(), HELP_WM_HELP, (DWORD_PTR) help_map) ) { _TRACE (0, L"WinHelp () failed: 0x%x\n", GetLastError ()); } break;
default: break; } _TRACE (-1, L"Leaving CEFSGeneralPropertyPage::DoContextHelp\n"); }
void CEFSGeneralPropertyPage::RSOPGetEFSFlags() { if ( m_pCompData ) { const CRSOPObjectArray* pObjectArray = m_bIsMachine ? m_pCompData->GetRSOPObjectArrayComputer () : m_pCompData->GetRSOPObjectArrayUser (); int nIndex = 0; bool bFound = false; // NOTE: rsop object array is sorted first by registry key, then by precedence
INT_PTR nUpperBound = pObjectArray->GetUpperBound ();
while ( nUpperBound >= nIndex ) { CRSOPObject* pObject = pObjectArray->GetAt (nIndex); if ( pObject ) { // Consider only entries from this store
// security review 2/22/2002 BryanWal ok
if ( !_wcsicmp (EFS_SETTINGS_REGPATH, pObject->GetRegistryKey ()) && !_wcsicmp (EFS_SETTINGS_REGVALUE, pObject->GetValueName ()) ) { ASSERT (1 == pObject->GetPrecedence ()); if ( 0 == pObject->GetDWORDValue () ) // 0 means enable EFS
SendDlgItemMessage (IDC_TURN_ON_EFS, BM_SETCHECK, BST_CHECKED); bFound = true; break; } } else break;
nIndex++; }
if ( !bFound ) // not found means EFS enabled
SendDlgItemMessage (IDC_TURN_ON_EFS, BM_SETCHECK, BST_CHECKED); } }
BOOL CEFSGeneralPropertyPage::OnApply() { if ( m_bDirty && m_pGPEInformation ) { // Unchecked means disable EFS - set flag to 1
if ( BST_UNCHECKED == SendDlgItemMessage (IDC_TURN_ON_EFS, BM_GETCHECK) ) { // Create Key
HKEY hKey = 0; DWORD dwDisposition = 0; LONG lResult = ::RegCreateKeyEx (m_hGroupPolicyKey, // handle of an open key
EFS_SETTINGS_REGPATH, // address of subkey name
0, // reserved
L"", // address of class string
REG_OPTION_NON_VOLATILE, // special options flag
// security review 2/22/2002 BryanWal ok
KEY_SET_VALUE, // desired security access
NULL, // address of key security structure
&hKey, // address of buffer for opened handle
&dwDisposition); // address of disposition value buffer
ASSERT (lResult == ERROR_SUCCESS); if ( lResult == ERROR_SUCCESS ) { DWORD dwData = 0x01; // 0 means disable EFS
DWORD cbData = sizeof (dwData); lResult = ::RegSetValueEx (hKey, EFS_SETTINGS_REGVALUE, // address of value to set
0, // reserved
REG_DWORD, // flag for value type
(CONST BYTE *) &dwData, // address of value data
cbData); // size of value data);
ASSERT (ERROR_SUCCESS == lResult); if ( ERROR_SUCCESS == lResult ) { // TRUE means we're changing the machine policy only
m_pGPEInformation->PolicyChanged (m_bIsMachine ? TRUE : FALSE, TRUE, &g_guidExtension, &g_guidSnapin); m_pGPEInformation->PolicyChanged (m_bIsMachine ? TRUE : FALSE, TRUE, &g_guidRegExt, &g_guidSnapin); } else DisplaySystemError (m_hWnd, lResult);
::RegCloseKey (hKey); } } else { // Delete Key
HKEY hKey = 0; LONG lResult = ::RegOpenKeyEx (m_hGroupPolicyKey, // handle to open key
EFS_SETTINGS_REGPATH, // subkey name
0, // reserved
// security review 2/22/2002 BryanWal ok KEY_ALL_ACCESS required to delete
KEY_ALL_ACCESS, // security access mask
&hKey); // handle to open key
if ( ERROR_SUCCESS == lResult ) { lResult = ::RegDeleteValue (hKey, // handle of key to query
EFS_SETTINGS_REGVALUE); ASSERT (ERROR_SUCCESS == lResult); if ( ERROR_SUCCESS == lResult ) { // TRUE means we're changing the machine policy only
m_pGPEInformation->PolicyChanged (m_bIsMachine ? TRUE : FALSE, TRUE, &g_guidExtension, &g_guidSnapin); m_pGPEInformation->PolicyChanged (m_bIsMachine ? TRUE : FALSE, TRUE, &g_guidRegExt, &g_guidSnapin); } else if ( ERROR_FILE_NOT_FOUND != lResult ) { CString text; CString caption;
// security review 2/22/2002 BryanWal ok
text.FormatMessage (IDS_CANNOT_SET_EFS_VALUE, lResult); VERIFY (caption.LoadString (IDS_PUBLIC_KEY_POLICIES_NODE_NAME));
MessageBox (text, caption, MB_OK | MB_ICONWARNING); return FALSE; }
::RegCloseKey (hKey); } else if ( ERROR_FILE_NOT_FOUND != lResult ) // expected error
{ CString text; CString caption;
// security review 2/22/2002 BryanWal ok
text.FormatMessage (IDS_CANNOT_SET_EFS_VALUE, lResult); VERIFY (caption.LoadString (IDS_PUBLIC_KEY_POLICIES_NODE_NAME));
MessageBox (text, caption, MB_OK | MB_ICONWARNING); return FALSE; } } } return CHelpPropertyPage::OnApply(); }
void CEFSGeneralPropertyPage::OnTurnOnEfs() { SetModified (); m_bDirty = true; }
|