.NET 6 Worker Service部署为Windows服务后Process.Start无法打开浏览器

核心原因 #

Windows服务默认运行在会话0，而当前登录用户的桌面环境属于会话1（及以上）。从Windows Vista开始，微软引入了会话隔离机制，会话0中的进程无法直接访问用户会话的桌面环境——哪怕你勾选了“允许服务与桌面交互”也没用，这个选项是针对旧系统设计的，现在已经失效。

可行解决方案 #

方案1：通过Windows API切换到用户会话启动进程

调用系统API获取当前活跃用户的会话ID，然后在该会话下启动浏览器进程。以下是完整实现代码：

using System;
using System.Diagnostics;
using System.Runtime.InteropServices;

public static class SessionProcessHelper
{
    [DllImport("kernel32.dll")]
    private static extern uint WTSGetActiveConsoleSessionId();

    [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
    private static extern bool CreateProcessAsUser(IntPtr hToken, string lpApplicationName, string lpCommandLine, IntPtr lpProcessAttributes, IntPtr lpThreadAttributes, bool bInheritHandles, uint dwCreationFlags, IntPtr lpEnvironment, string lpCurrentDirectory, [In] ref STARTUPINFO lpStartupInfo, out PROCESS_INFORMATION lpProcessInformation);

    [DllImport("advapi32.dll", SetLastError = true)]
    private static extern bool OpenProcessToken(IntPtr ProcessHandle, uint DesiredAccess, out IntPtr TokenHandle);

    [DllImport("advapi32.dll", SetLastError = true)]
    private static extern bool DuplicateTokenEx(IntPtr hExistingToken, uint dwDesiredAccess, IntPtr lpTokenAttributes, uint ImpersonationLevel, uint TokenType, out IntPtr phNewToken);

    [DllImport("userenv.dll", SetLastError = true)]
    private static extern bool CreateEnvironmentBlock(out IntPtr lpEnvironment, IntPtr hToken, bool bInherit);

    [DllImport("userenv.dll", SetLastError = true)]
    private static extern bool DestroyEnvironmentBlock(IntPtr lpEnvironment);

    [DllImport("kernel32.dll", SetLastError = true)]
    private static extern bool CloseHandle(IntPtr hObject);

    private const uint GENERIC_ALL = 0x10000000;
    private const uint CREATE_UNICODE_ENVIRONMENT = 0x00000400;
    private const int STARTF_USESHOWWINDOW = 0x00000001;
    private const int SW_SHOWNORMAL = 1;
    private const uint SECURITY_IMPERSONATION_LEVEL = 2;
    private const uint TOKEN_TYPE = 1;

    [StructLayout(LayoutKind.Sequential)]
    private struct STARTUPINFO
    {
        public int cb;
        public string lpReserved;
        public string lpDesktop;
        public string lpTitle;
        public int dwX;
        public int dwY;
        public int dwXSize;
        public int dwYSize;
        public int dwXCountChars;
        public int dwYCountChars;
        public int dwFillAttribute;
        public int dwFlags;
        public short wShowWindow;
        public short cbReserved2;
        public IntPtr lpReserved2;
        public IntPtr hStdInput;
        public IntPtr hStdOutput;
        public IntPtr hStdError;
    }

    [StructLayout(LayoutKind.Sequential)]
    private struct PROCESS_INFORMATION
    {
        public IntPtr hProcess;
        public IntPtr hThread;
        public uint dwProcessId;
        public uint dwThreadId;
    }

    public static bool StartBrowserInUserSession(string url)
    {
        uint sessionId = WTSGetActiveConsoleSessionId();
        if (sessionId == 0xFFFFFFFF) return false;

        if (!OpenProcessToken(Process.GetCurrentProcess().Handle, GENERIC_ALL, out IntPtr hToken))
            return false;

        if (!DuplicateTokenEx(hToken, GENERIC_ALL, IntPtr.Zero, SECURITY_IMPERSONATION_LEVEL, TOKEN_TYPE, out IntPtr hNewToken))
        {
            CloseHandle(hToken);
            return false;
        }

        if (!CreateEnvironmentBlock(out IntPtr lpEnvironment, hNewToken, false))
        {
            CloseHandle(hNewToken);
            CloseHandle(hToken);
            return false;
        }

        STARTUPINFO si = new STARTUPINFO();
        si.cb = Marshal.SizeOf(si);
        si.lpDesktop = @"winsta0\default";
        si.dwFlags = STARTF_USESHOWWINDOW;
        si.wShowWindow = SW_SHOWNORMAL;

        string commandLine = $"explorer.exe {url}";
        bool result = CreateProcessAsUser(hNewToken, null, commandLine, IntPtr.Zero, IntPtr.Zero, false, CREATE_UNICODE_ENVIRONMENT, lpEnvironment, null, ref si, out PROCESS_INFORMATION pi);

        DestroyEnvironmentBlock(lpEnvironment);
        CloseHandle(hNewToken);
        CloseHandle(hToken);
        if (result)
        {
            CloseHandle(pi.hProcess);
            CloseHandle(pi.hThread);
        }

        return result;
    }
}

在Worker Service中调用：

// 替换成你要打开的网址
SessionProcessHelper.StartBrowserInUserSession("https://www.example.com");

方案2：改用用户级后台程序替代Windows服务

如果你的场景不需要Windows服务的核心特性（比如开机自启、无用户登录时运行），可以把Worker Service改成Windows Forms/WPF后台程序，或者通过任务计划程序创建一个用户登录时触发的任务——这样程序运行在用户会话中，直接调用Process.Start就能正常打开浏览器。

补充说明 #

• “允许服务与桌面交互”选项在Windows Vista及以后系统中已被废弃，会话隔离机制导致该选项无法让服务进程访问用户桌面。
• UseShellExecute=true在服务环境中无法生效，因为服务没有关联的Shell运行环境。

内容的提问来源于stack exchange，提问作者Karan Ekkawala