win32-service的创建参考这篇教程：Simple Windows Service in C安装service需要在管理员权限下运行cmd，并输入下面的命令行C:\>sc create "My Sample Service" binPath= C:\SampleServi ce.exeMy Sample Service是service name，可以随意更改。
后面的exe程序是我们需要执行的service，代码如下。
卸载service，输入，C:\>sc delete "My Sample Service"代码样例：#include <Windows.h>#include <tchar.h>#include <wtsapi32.h>#pragma comment(lib,"Wtsapi32.lib")SERVICE_STATUS g_ServiceStatus = { 0 };SERVICE_STATUS_HANDLE g_StatusHandle = NULL;HANDLE g_ServiceStopEvent = INVALID_HANDLE_ VALUE;HANDLE g_hChildStd_Rd = NULL;HANDLE g_hChildStd_Wr = NULL;VOID WINAPI ServiceMain(DWORD argc, LPTSTR* argv);VOID WINAPI ServiceCtrlHandler(DWORD);DWORD WINAPI ServiceWorkerThread(LPVOID lpParam);#define SERVICE_NAME _T("My Sample Service")int _tmain(int argc, TCHAR* argv[]){OutputDebugString(_T("My Sample Service: Main: Entry"));SERVICE_TABLE_ENTRY ServiceTable[] ={{(LPWSTR)SERVICE_NAME, (LPSERVICE_MAIN_FUNCTION)S erviceMain},{NULL, NULL}};if (StartServiceCtrlDispatcher(ServiceTable) == FALSE){OutputDebugString(_T("My Sample Service: Main: StartServ iceCtrlDispatcher returned error"));return GetLastError();}OutputDebugString(_T("My Sample Service: Main: Exit"));return 0;}VOID WINAPI ServiceMain(DWORD argc, LPTSTR* argv){HANDLE hThread;DWORD Status = E_FAIL;OutputDebugString(_T("My Sample Service: ServiceMain: En try"));g_StatusHandle = RegisterServiceCtrlHandler(SERVICE_NA ME, ServiceCtrlHandler);if (g_StatusHandle == NULL){OutputDebugString(_T("My Sample Service: ServiceMain: R egisterServiceCtrlHandler returned error"));goto EXIT;}// Tell the service controller we are startingZeroMemory(&g_ServiceStatus, sizeof(g_ServiceStatus));g_ServiceStatus.dwServiceType = SERVICE_WIN32_OWN_PR OCESS;g_ServiceStatus.dwControlsAccepted = 0;g_ServiceStatus.dwCurrentState = SERVICE_START_PENDIN G;g_ServiceStatus.dwWin32ExitCode = 0;g_ServiceStatus.dwServiceSpecificExitCode = 0;g_ServiceStatus.dwCheckPoint = 0;if (SetServiceStatus(g_StatusHandle, &g_ServiceStatus) == F ALSE){OutputDebugString(_T("My Sample Service: ServiceMain: Se tServiceStatus returned error"));/** Perform tasks neccesary to start the service here*/OutputDebugString(_T("My Sample Service: ServiceMain: Pe rforming Service Start Operations"));// Create stop event to wait on later.g_ServiceStopEvent = CreateEvent(NULL, TRUE, FALSE, NUL L);if (g_ServiceStopEvent == NULL){OutputDebugString(_T("My Sample Service: ServiceMain: Cr eateEvent(g_ServiceStopEvent) returned error"));g_ServiceStatus.dwControlsAccepted = 0;g_ServiceStatus.dwCurrentState = SERVICE_STOPPED;g_ServiceStatus.dwWin32ExitCode = GetLastError();g_ServiceStatus.dwCheckPoint = 1;if (SetServiceStatus(g_StatusHandle, &g_ServiceStatus) == F ALSE){OutputDebugString(_T("My Sample Service: ServiceMain: Se tServiceStatus returned error"));}goto EXIT;}// Tell the service controller we are startedg_ServiceStatus.dwControlsAccepted = SERVICE_ACCEPT_ST OP;g_ServiceStatus.dwCurrentState = SERVICE_RUNNING;g_ServiceStatus.dwWin32ExitCode = 0;g_ServiceStatus.dwCheckPoint = 0;if (SetServiceStatus(g_StatusHandle, &g_ServiceStatus) == F ALSE){OutputDebugString(_T("My Sample Service: ServiceMain: Se tServiceStatus returned error"));}// Start the thread that will perform the main task of the ser vicehThread = CreateThread(NULL, 0, ServiceWorkerThread, NU LL, 0, NULL);OutputDebugString(_T("My Sample Service: ServiceMain: W aiting for Worker Thread to complete"));// Wait until our worker thread exits effectively signaling tha t the service needs to stopWaitForSingleObject(hThread, INFINITE);OutputDebugString(_T("My Sample Service: ServiceMain: W orker Thread Stop Event signaled"));/** Perform any cleanup tasks*/OutputDebugString(_T("My Sample Service: ServiceMain: Pe rforming Cleanup Operations"));CloseHandle(g_ServiceStopEvent);g_ServiceStatus.dwControlsAccepted = 0;g_ServiceStatus.dwCurrentState = SERVICE_STOPPED;g_ServiceStatus.dwWin32ExitCode = 0;g_ServiceStatus.dwCheckPoint = 3;if (SetServiceStatus(g_StatusHandle, &g_ServiceStatus) == F ALSE){OutputDebugString(_T("My Sample Service: ServiceMain: Se tServiceStatus returned error"));}EXIT:OutputDebugString(_T("My Sample Service: ServiceMain: Ex it"));return;}VOID WINAPI ServiceCtrlHandler(DWORD CtrlCode){OutputDebugString(_T("My Sample Service: ServiceCtrlHan dler: Entry"));switch (CtrlCode){case SERVICE_CONTROL_STOP:OutputDebugString(_T("My Sample Service: ServiceCtrlHan dler: SERVICE_CONTROL_STOP Request"));if (g_ServiceStatus.dwCurrentState != SERVICE_RUNNING) break;/** Perform tasks neccesary to stop the service here*/g_ServiceStatus.dwControlsAccepted = 0;g_ServiceStatus.dwCurrentState = SERVICE_STOP_PENDING;g_ServiceStatus.dwWin32ExitCode = 0;g_ServiceStatus.dwCheckPoint = 4;if (SetServiceStatus(g_StatusHandle, &g_ServiceStatus) == F ALSE){OutputDebugString(_T("My Sample Service: ServiceCtrlHan dler: SetServiceStatus returned error"));}// This will signal the worker thread to start shutting downSetEvent(g_ServiceStopEvent);break;default:break;}OutputDebugString(_T("My Sample Service: ServiceCtrlHan dler: Exit"));}DWORD WINAPI ServiceWorkerThread(LPVOID lpParam){OutputDebugString(_T("My Sample Service: ServiceWorkerT hread: Entry"));WCHAR station[] = L"Winsta0\\default";SECURITY_ATTRIBUTES saAttr;saAttr.nLength = sizeof(SECURITY_ATTRIBUTES);saAttr.bInheritHandle = TRUE;saAttr.lpSecurityDescriptor = NULL;CreatePipe(&g_hChildStd_Rd, &g_hChildStd_Wr, &saAttr, 0);STARTUPINFO si;ZeroMemory(&si, sizeof(STARTUPINFO));si.cb = sizeof(STARTUPINFO);si.hStdOutput = g_hChildStd_Wr;si.hStdError = g_hChildStd_Wr;si.lpDesktop = station;si.dwFlags = STARTF_USESTDHANDLES;PROCESS_INFORMATION pi;HANDLE hToken;bool err = WTSQueryUserToken(WTSGetActiveConsoleSessi onId(), &hT oken);WCHAR path[] = L"D:\\child.exe";if (CreateProcessAsUser(hT oken, path, NULL, 0, 0, true, CREA TE_NO_WINDOW, 0, 0, &si, &pi)){CloseHandle(g_hChildStd_Wr);DWORD ret = WaitForSingleObject(pi.hProcess, 2000); //wai t for the child process exit.if (ret == 0){WCHAR chBuf[100]= L"HELLO WORLD";DWORD dwRead, dwWritten,err = ReadFile(g_hChildStd_Rd, chBuf, 100, &dwRead, NULL);HANDLE hFile = CreateFile(L"123.txt", // name of t he writeGENERIC_WRITE, // open for writing0, // do not shareNULL, // default securityCREATE_NEW, // create new file onlyFILE_ATTRIBUTE_NORMAL, // normal fileNULL); // no attr. templateWriteFile(hFile, // open file handlechBuf, // start of data to write100, // number of bytes to write&dwWritten, // number of bytes that were writtenNULL); // no overlapped structure}}// Periodically check if the service has been requested to st opwhile (WaitForSingleObject(g_ServiceStopEvent, 0) != WAIT_ OBJECT_0){/** Perform main service function here*/// Simulate some work by sleepingSleep(3000);}OutputDebugString(_T("My Sample Service: ServiceWorkerT hread: Exit"));return ERROR_SUCCESS;}在Winsta0\default中创建子进程，在service中使用CreateProcessAsUser调用子进程。
