使用Visual Studio 2026，如何用不同凭据登录远程Windows服务器？

在域环境下，ServiceController默认会自动传递当前登录凭据，要指定不同用户身份操作远程服务，有两种可靠实现方式：

方法一：使用WMI直接指定凭据连接远程服务器 #

WMI（Windows Management Instrumentation）支持在连接时直接传入自定义用户名和密码，无需身份模拟，代码示例如下：

using System.Management;
using System;

public class RemoteServiceManager
{
    public void RestartTargetService(string remoteMachineName, string serviceName, string username, string password, string domain)
    {
        // 配置WMI连接选项
        var connectionOptions = new ConnectionOptions
        {
            Username = username,
            Password = password,
            Authority = $"NTLM:{domain}", // 根据环境选择NTLM或Kerberos
            Impersonation = ImpersonationLevel.Impersonate,
            Authentication = AuthenticationLevel.PacketPrivacy
        };

        // 构建远程WMI作用域
        var managementScope = new ManagementScope($"\\\\{remoteMachineName}\\root\\cimv2", connectionOptions);
        managementScope.Connect();

        // 查询目标服务
        var serviceQuery = new ObjectQuery($"SELECT * FROM Win32_Service WHERE Name = '{serviceName}'");
        using var searcher = new ManagementObjectSearcher(managementScope, serviceQuery);
        using var serviceCollection = searcher.Get();

        foreach (ManagementObject service in serviceCollection)
        {
            // 停止服务并等待状态变更
            service.InvokeMethod("StopService", null);
            service.WaitForStatus(ManagementObjectStatus.Stopped, TimeSpan.FromSeconds(30));
            
            // 启动服务并等待状态变更
            service.InvokeMethod("StartService", null);
            service.WaitForStatus(ManagementObjectStatus.Running, TimeSpan.FromSeconds(30));
        }
    }
}

注意事项： #

• 需要在项目中引用System.Management程序集
• 目标用户必须拥有远程服务器上的服务管理权限（如加入Administrators组）
• 确保远程服务器开放WMI相关端口（135端口及动态RPC端口）

方法二：通过用户身份模拟操作ServiceController #

先通过Windows API模拟指定用户身份，再使用ServiceController执行服务操作，代码示例如下：

using System;
using System.ServiceProcess;
using System.Runtime.InteropServices;
using System.Security.Principal;

public class ServiceImpersonationHelper
{
    [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
    private static extern bool LogonUser(string username, string domain, string password,
        int logonType, int logonProvider, out IntPtr userToken);

    [DllImport("kernel32.dll", CharSet = CharSet.Auto)]
    private static extern bool CloseHandle(IntPtr handle);

    private const int LOGON32_LOGON_INTERACTIVE = 2;
    private const int LOGON32_PROVIDER_DEFAULT = 0;

    public void RestartServiceAsUser(string remoteMachine, string serviceName, string username, string password, string domain)
    {
        IntPtr userToken = IntPtr.Zero;
        WindowsImpersonationContext impersonationContext = null;

        try
        {
            // 获取目标用户的登录令牌
            bool logonSuccess = LogonUser(username, domain, password, LOGON32_LOGON_INTERACTIVE, LOGON32_PROVIDER_DEFAULT, out userToken);
            if (!logonSuccess)
            {
                throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error());
            }

            // 模拟目标用户身份
            var identity = new WindowsIdentity(userToken);
            impersonationContext = identity.Impersonate();

            // 使用ServiceController操作远程服务
            using var serviceController = new ServiceController(serviceName, remoteMachine);
            serviceController.Stop();
            serviceController.WaitForStatus(ServiceControllerStatus.Stopped, TimeSpan.FromSeconds(30));
            serviceController.Start();
            serviceController.WaitForStatus(ServiceControllerStatus.Running, TimeSpan.FromSeconds(30));
        }
        finally
        {
            // 清理模拟身份及令牌资源
            impersonationContext?.Undo();
            if (userToken != IntPtr.Zero)
            {
                CloseHandle(userToken);
            }
        }
    }
}

注意事项： #

• 模拟用户的登录类型选择LOGON32_LOGON_INTERACTIVE适用于大多数域环境场景
• 需确保目标用户拥有远程服务的操作权限
• 操作完成后必须释放模拟上下文和令牌，避免资源泄漏

内容的提问来源于stack exchange，提问作者cpeterson36