I’m using a corporate workstation, and my IT department keeps using programs to restart my PC without my permission. I’ve asked them to stop, but they don’t how how – typical.
Anyway, I figured there must be a way of preventing (malicious?) programs like these from restarting my PC… So how about preventing ExitWindows or ExitWindowsEx from being called? I assume this is what they’ll be using, but I’m not sure how to find out.
Is this a good solution, or should I just move to another company?
Update 1:
Just thinking about this from another angle – is it possible to tell which program is making a call to ExitWindows or ExitWindowsEx? This way I can log the process name, and then write a small program to blacklist the offending program (i.e. kill it whenever it appears).
On < Vista, you can handle WM_QUERYENDSESSION, on Vista+, you need to use ShutdownBlockReasonCreate in addition to WM_QUERYENDSESSION.