Hello
Services in Microsoft Windows are generally console applications that are
designed to run unattended. Therefore, services do not typically have a
user interface. However, the service may require interaction with the user
in some instances. We strongly recommend that services do not run as
interactive services if the services run in an elevated security context
such as SYSTEM.
For the Windows user interface, the desktop is the security boundary. Any
application that is running on the interactive desktop can interact with
any window that is on the interactive desktop, even if that window is not
displayed on the desktop. This behavior is true for every application,
regardless of the security context of the application that creates the
window and regardless of the security context of the application that is
running on the desktop. The Windows message system does not allow an
application to determine the source of a window message.
Because of these design features, any service that opens a window on the
interactive desktop is exposing itself to applications that are executed by
the logged-on user. If the service tries to use window messages to control
its functionality, the logged-on user can disrupt that functionality by
using malicious messages.
So, for security issue, we don't recommend to use user interface or GDI in
a windows service application.
If there is anything unclear, please feel free to let me know.
Sincerely,
Luke Zhang
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.