如何通过PowerShell交互式设置现有Windows服务的登录用户及密码

嘿，刚好我之前折腾过这个需求！要实现像installutil那样的前台凭据输入弹窗，其实有两种靠谱的方案，看你更倾向于自定义样式还是系统原生风格：

方案一：自定义Windows Forms对话框（灵活可控） #

如果你想自己设计弹窗的样式、加验证逻辑，这种方式最适合。只需要在你的.NET安装程序类里嵌入一个简单的WinForm即可：

代码示例 #

using System;
using System.ComponentModel;
using System.Configuration.Install;
using System.ServiceProcess;
using System.Windows.Forms;

[RunInstaller(true)]
public class MyServiceInstaller : Installer
{
    private ServiceProcessInstaller _processInstaller;
    private ServiceInstaller _serviceInstaller;

    public MyServiceInstaller()
    {
        _processInstaller = new ServiceProcessInstaller();
        _serviceInstaller = new ServiceInstaller();

        // 先标记为用户账户，后续用输入的凭据覆盖
        _processInstaller.Account = ServiceAccount.User;
        _serviceInstaller.ServiceName = "MyCustomService";
        _serviceInstaller.StartType = ServiceStartMode.Automatic;

        Installers.Add(_processInstaller);
        Installers.Add(_serviceInstaller);
    }

    public override void Install(System.Collections.IDictionary stateSaver)
    {
        // 弹出自定义凭据输入框
        using (var credForm = new CredentialInputForm())
        {
            if (credForm.ShowDialog() != DialogResult.OK)
            {
                throw new InstallException("用户取消凭据输入，安装终止");
            }

            // 把输入的凭据赋值给服务安装器
            _processInstaller.Username = credForm.Username;
            _processInstaller.Password = credForm.Password;
        }

        base.Install(stateSaver);
    }
}

// 自定义的凭据输入窗体
public class CredentialInputForm : Form
{
    private TextBox _txtUsername;
    private TextBox _txtPassword;

    public string Username => _txtUsername.Text;
    public string Password => _txtPassword.Text;

    public CredentialInputForm()
    {
        Text = "服务运行凭据";
        Size = new System.Drawing.Size(320, 160);
        StartPosition = FormStartPosition.CenterScreen;
        FormBorderStyle = FormBorderStyle.FixedDialog;
        MaximizeBox = false;
        MinimizeBox = false;

        // 初始化控件
        var lblUsername = new Label { Text = "用户名:", Location = new System.Drawing.Point(20, 25) };
        _txtUsername = new TextBox { Location = new System.Drawing.Point(85, 25), Width = 200 };

        var lblPassword = new Label { Text = "密  码:", Location = new System.Drawing.Point(20, 60) };
        _txtPassword = new TextBox { Location = new System.Drawing.Point(85, 60), Width = 200, PasswordChar = '*' };

        var btnOK = new Button { Text = "确定", Location = new System.Drawing.Point(95, 95), DialogResult = DialogResult.OK };
        var btnCancel = new Button { Text = "取消", Location = new System.Drawing.Point(185, 95), DialogResult = DialogResult.Cancel };

        Controls.Add(lblUsername);
        Controls.Add(_txtUsername);
        Controls.Add(lblPassword);
        Controls.Add(_txtPassword);
        Controls.Add(btnOK);
        Controls.Add(btnCancel);

        AcceptButton = btnOK;
        CancelButton = btnCancel;
    }
}

方案二：调用Windows原生凭据对话框（和installutil风格一致） #

如果你想要和installutil完全一样的系统原生弹窗，可以通过P/Invoke调用Windows的CredUIPromptForCredentials函数，这个就是installutil背后用的API：

代码示例 #

using System;
using System.ComponentModel;
using System.Configuration.Install;
using System.Runtime.InteropServices;
using System.ServiceProcess;

[RunInstaller(true)]
public class MyServiceInstaller : Installer
{
    private ServiceProcessInstaller _processInstaller;
    private ServiceInstaller _serviceInstaller;

    public MyServiceInstaller()
    {
        _processInstaller = new ServiceProcessInstaller();
        _serviceInstaller = new ServiceInstaller();

        _processInstaller.Account = ServiceAccount.User;
        _serviceInstaller.ServiceName = "MyCustomService";
        _serviceInstaller.StartType = ServiceStartMode.Automatic;

        Installers.Add(_processInstaller);
        Installers.Add(_serviceInstaller);
    }

    public override void Install(System.Collections.IDictionary stateSaver)
    {
        string username = string.Empty;
        string password = string.Empty;

        if (!ShowCredentialPrompt(ref username, ref password))
        {
            throw new InstallException("用户取消凭据输入，安装终止");
        }

        _processInstaller.Username = username;
        _processInstaller.Password = password;

        base.Install(stateSaver);
    }

    // P/Invoke声明Windows原生API
    [DllImport("credui.dll", CharSet = CharSet.Unicode)]
    private static extern bool CredUIPromptForCredentials(ref CREDUI_INFO creditInfo,
        string targetName,
        IntPtr reserved1,
        int errorCode,
        StringBuilder userName,
        int maxUserName,
        StringBuilder password,
        int maxPassword,
        [MarshalAs(UnmanagedType.Bool)] ref bool saveCredentials,
        int flags);

    [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
    private struct CREDUI_INFO
    {
        public int cbSize;
        public IntPtr hwndParent;
        public string MessageText;
        public string CaptionText;
        public IntPtr BannerImage;
    }

    private bool ShowCredentialPrompt(ref string username, ref string password)
    {
        var credInfo = new CREDUI_INFO();
        credInfo.cbSize = Marshal.SizeOf(credInfo);
        credInfo.CaptionText = "服务运行凭据";
        credInfo.MessageText = "请输入用于运行Windows服务的用户名和密码";

        var userNameBuffer = new StringBuilder(100);
        var passwordBuffer = new StringBuilder(100);
        bool save = false;

        // 设置对话框标志：通用凭据、始终显示UI、不保存凭据
        const int flags = 0x1 | 0x2 | 0x8;

        bool result = CredUIPromptForCredentials(ref credInfo,
            "ServiceCredentials",
            IntPtr.Zero,
            0,
            userNameBuffer,
            userNameBuffer.Capacity,
            passwordBuffer,
            passwordBuffer.Capacity,
            ref save,
            flags);

        if (result)
        {
            username = userNameBuffer.ToString();
            password = passwordBuffer.ToString();
            return true;
        }
        return false;
    }
}

额外：PowerShell脚本方案 #

如果你的安装脚本是PowerShell写的，那就更简单了，直接用Get-Credential cmdlet就能弹出原生凭据框：

# 弹出凭据输入框
$serviceCredential = Get-Credential -Message "请输入服务运行的用户名和密码"

# 创建/安装服务
New-Service -Name "MyCustomService" `
            -BinaryPathName "C:\YourServicePath\ServiceExe.exe" `
            -Credential $serviceCredential `
            -StartupType Automatic

注意事项 #

• 不管用哪种方案，安装程序都需要管理员权限，因为修改服务凭据是高权限操作。
• 自定义窗体方案可以轻松扩展，比如加用户名格式验证（比如要求域名\用户名格式）。
• 原生API方案的弹窗风格会跟随系统主题，用户接受度更高。

内容的提问来源于stack exchange，提问作者Charlie Echo