c# - 在没有 Windows 访问权限的情况下使用凭据信息访问共享文件夹

Question

我有一个将文件复制到共享网络路径的项目。当我的应用程序对此路径进行身份验证时，用户还可以使用文件资源管理器访问此文件夹。如何防止用户在没有用户名和密码提示的情况下使用文件资源管理器访问此路径？我正在使用 NetworkCredential 类进行身份验证。

这是我的代码:

class Program
{
    static void Main(string[] args) {

        string path = @"";
        string username = "";
        string password = "";


        try {
            using (NetworkConnection nc = new NetworkConnection(path, new NetworkCredential(username, password))) {
                Console.WriteLine("Connected successfully...");

                //copy files here ........
            }
        } catch (Exception ex) {
            Console.WriteLine(ex.Message);
        }

        Console.Read();
    }
}

public class NetworkConnection : IDisposable
{
    string _networkName;

    public NetworkConnection(string networkName,
        NetworkCredential credentials) {
        _networkName = networkName;

        var netResource = new NetResource() {
            Scope = ResourceScope.GlobalNetwork,
            ResourceType = ResourceType.Disk,
            DisplayType = ResourceDisplaytype.Share,
            RemoteName = networkName
        };

        var userName = string.IsNullOrEmpty(credentials.Domain)
            ? credentials.UserName
            : string.Format(@"{0}\{1}", credentials.Domain, credentials.UserName);

        var result = WNetAddConnection2(
            netResource,
            credentials.Password,
            userName,
            0);

        if (result != 0) {
            throw new Exception( "Error connecting to remote share");
        }
    }

    ~NetworkConnection() {
        Dispose(false);
    }

    public void Dispose() {
        Dispose(true);
        GC.SuppressFinalize(this);
    }

    protected virtual void Dispose(bool disposing) {
        WNetCancelConnection2(_networkName, 0, true);
    }

    [DllImport("mpr.dll")]
    private static extern int WNetAddConnection2(NetResource netResource,
        string password, string username, int flags);

    [DllImport("mpr.dll")]
    private static extern int WNetCancelConnection2(string name, int flags,
        bool force);
}

[StructLayout(LayoutKind.Sequential)]
public class NetResource
{
    public ResourceScope Scope;
    public ResourceType ResourceType;
    public ResourceDisplaytype DisplayType;
    public int Usage;
    public string LocalName;
    public string RemoteName;
    public string Comment;
    public string Provider;
}

public enum ResourceScope : int
{
    Connected = 1,
    GlobalNetwork,
    Remembered,
    Recent,
    Context
};

public enum ResourceType : int
{
    Any = 0,
    Disk = 1,
    Print = 2,
    Reserved = 8,
}

public enum ResourceDisplaytype : int
{
    Generic = 0x0,
    Domain = 0x01,
    Server = 0x02,
    Share = 0x03,
    File = 0x04,
    Group = 0x05,
    Network = 0x06,
    Root = 0x07,
    Shareadmin = 0x08,
    Directory = 0x09,
    Tree = 0x0a,
    Ndscontainer = 0x0b
}

Answer 1

您可以使用 WNetAddConnection2 函数的最后一个参数设置连接选项。此示例提示用户登录。

 var result = WNetAddConnection2(
            netResource,
            credentials.Password,
            userName,
            0x00000008 | 0x00000010);

0x00000008 = 如果设置此标志，操作系统可能会出于身份验证目的与用户交互。

0x00000010 = 该标志指示系统不要使用用户名或密码的任何默认设置，而不为用户提供提供替代方案的机会。除非同时设置了 CONNECT_INTERACTIVE，否则该标志将被忽略。

This flag can also be use if the application runs with a different user.

0x00000004 =不应记住网络资源连接。如果设置此标志，当用户再次登录时操作系统将不会尝试恢复连接。

Or a combination with those flags

0x00002000 = 如果设置了此标志，并且操作系统提示输入凭据，则凭据管理器将重置该凭据。除非您设置 CONNECT_COMMANDLINE 标志，否则该标志将被忽略。

0x00000800 = 如果设置此标志，操作系统将提示用户使用命令行而不是图形用户界面 (GUI) 进行身份验证。除非同时设置了 CONNECT_INTERACTIVE，否则该标志将被忽略。