如何在C#中实现带管理员权限的计算机重命名？

问题概述 #

开发资产盘点程序时，需添加按模板重命名本地计算机的功能。程序在普通用户登录状态下运行，需要临时获取管理员权限执行重命名，但尝试多种方法均失败：

已尝试的方法及报错 #

1. 带凭证的WMI连接 #

报错信息：Error: User credentials cannot be used for local connections
代码实现：

try
{
    ConnectionOptions connectionOptions = new ConnectionOptions
    {
        Username = admin,
        Password = password,
        Authority = $"NTLMDOMAIN:DOMAIN"
    };
    ManagementScope scope = new ManagementScope($@"\\{Environment.MachineName}\root\cimv2", connectionOptions);

    using (ManagementObjectSearcher searcher = new ManagementObjectSearcher(scope, new ObjectQuery("SELECT * FROM Win32_ComputerSystem")))
    {
        ManagementObjectCollection collection = searcher.Get();
        foreach (ManagementObject obj in collection)
        {
            obj["Name"] = newComputerName;
            obj.InvokeMethod("Rename", null);
        }
    }

    Console.WriteLine($"Computer renamed to: {newComputerName}");
}
catch (UnauthorizedAccessException)
{
    Console.WriteLine("Access denied. Make sure you have the necessary permissions.");
}
catch (Exception ex)
{
    Console.WriteLine($"Error: {ex.Message}");
}

2. C#调用PowerShell命令 #

手动运行Rename-Computer -NewName "newNameHere" -DomainCredential domainHere\adminHere可成功，但C#调用时报错Error Code 5 (Access Denied)，且无凭证弹窗：
代码实现：

static void RunCommandWithAdminPrivileges(string username, SecureString password)
{
    string commandToRun = "Rename-Computer -NewName \"newNameHere\" -DomainCredential domainHere\\adminHere";

    ProcessStartInfo psi = new ProcessStartInfo
    {
        FileName = "powershell.exe",
        Arguments = $"-Command {commandToRun}",
        UseShellExecute = false,
        RedirectStandardOutput = true,
        RedirectStandardError = true,
        CreateNoWindow = true,
        Domain = "Domain",
        Verb = "runas",
        UserName = username,
        Password = password
    };

    using (Process process = new Process { StartInfo = psi })
    {
        process.Start();
        process.WaitForExit();

        string output = process.StandardOutput.ReadToEnd();
        string error = process.StandardError.ReadToEnd();

        Console.WriteLine("Output: " + output);
        Console.WriteLine("Error: " + error);
    }
}

3. 无凭证WMI方法 #

报错信息：Error Code 5 (Access Denied)
代码实现：

static void ChangeComputerName(string newComputerName)
{
    using (ManagementObject win32ComputerSystem = new ManagementObject("Win32_ComputerSystem.Name='" + System.Environment.MachineName + "'"))
    {
        ManagementBaseObject inParams = win32ComputerSystem.GetMethodParameters("Rename");
        inParams["Name"] = newComputerName;

        ManagementBaseObject outParams = win32ComputerSystem.InvokeMethod("Rename", inParams, null);

        uint returnValue = (uint)outParams["ReturnValue"];
        if (returnValue != 0)
        {
            throw new InvalidOperationException($"Failed to change computer name. Error code: {returnValue}");
        }
    }
}

此外，尝试过Codeproject的用户模拟类，问题仍未解决。

有效解决方案 #

方案1：拆分流程，通过UAC提升子进程权限 #

这是符合Windows安全规范的标准做法：主程序以普通权限完成资产盘点，需要重命名时，启动一个要求管理员权限的子进程，系统会自动弹出UAC窗口让管理员输入凭证。

实现代码：

// 主程序中调用此方法触发重命名
static void TriggerRenameAsAdmin(string newComputerName)
{
    string exePath = System.Reflection.Assembly.GetExecutingAssembly().Location;
    string arguments = $"--rename \"{newComputerName}\"";

    ProcessStartInfo psi = new ProcessStartInfo
    {
        FileName = exePath,
        Arguments = arguments,
        Verb = "runas", // 触发UAC权限提升
        UseShellExecute = true,
        WindowStyle = ProcessWindowStyle.Normal
    };

    try
    {
        using (Process process = Process.Start(psi))
        {
            process.WaitForExit();
            Console.WriteLine(process.ExitCode == 0 ? "重命名成功，需重启生效" : $"重命名失败，退出码：{process.ExitCode}");
        }
    }
    catch (System.ComponentModel.Win32Exception ex)
    {
        if (ex.NativeErrorCode == 1223)
        {
            Console.WriteLine("用户取消了权限提升操作");
        }
        else
        {
            Console.WriteLine($"启动权限提升进程失败：{ex.Message}");
        }
    }
}

// 程序入口处理命令行参数
static void Main(string[] args)
{
    if (args.Length > 0 && args[0] == "--rename")
    {
        // 子进程已拥有管理员权限，执行重命名逻辑
        string newName = args[1];
        try
        {
            using (ManagementObject computer = new ManagementObject($"Win32_ComputerSystem.Name='{Environment.MachineName}'"))
            {
                ManagementBaseObject inParams = computer.GetMethodParameters("Rename");
                inParams["Name"] = newName;
                ManagementBaseObject outParams = computer.InvokeMethod("Rename", inParams, null);
                uint result = (uint)outParams["ReturnValue"];
                Environment.Exit(result == 0 ? 0 : 1);
            }
        }
        catch (Exception ex)
        {
            Console.WriteLine($"重命名出错：{ex.Message}");
            Environment.Exit(1);
        }
    }
    else
    {
        // 执行普通权限的资产盘点逻辑
        Console.WriteLine("执行资产盘点操作...");
        // 完成盘点后触发重命名
        TriggerRenameAsAdmin("NEW-PC-001");
    }
}

方案2：调整PowerShell调用方式 #

若坚持使用PowerShell，需让系统通过UAC弹窗获取权限，而非手动传入凭证：

static void RunRenamePowerShell(string newComputerName)
{
    string command = $"Rename-Computer -NewName \"{newComputerName}\" -Force";
    ProcessStartInfo psi = new ProcessStartInfo
    {
        FileName = "powershell.exe",
        Arguments = $"-Command {command}",
        Verb = "runas",
        UseShellExecute = true,
        CreateNoWindow = false
    };

    try
    {
        using (Process p = Process.Start(psi))
        {
            p.WaitForExit();
            Console.WriteLine(p.ExitCode == 0 ? "重命名命令执行成功，需重启生效" : $"重命名失败，退出码：{p.ExitCode}");
        }
    }
    catch (System.ComponentModel.Win32Exception ex)
    {
        if (ex.NativeErrorCode == 1223)
        {
            Console.WriteLine("用户取消了权限提升");
        }
        else
        {
            Console.WriteLine($"启动PowerShell失败：{ex.Message}");
        }
    }
}

关键注意事项 #

• 本地WMI连接不支持显式凭证：Windows安全机制禁止本地WMI连接使用指定的用户名和密码，这是第一种方法报错的核心原因。
• 依赖UAC而非手动模拟：手动用户模拟容易引发权限问题，依赖系统UAC弹窗是最安全的本地权限提升方式。
• 重命名后需重启：无论哪种方法，计算机名称变更都需要重启才能生效，需提示用户完成重启。

内容的提问来源于stack exchange，提问作者s0k0latas