C# 从远程计算机调用 Windows 服务

Call A Windows Service from a remote computer

提问by Vaccano

I am going to be coding up a windows service to add users to a computer (users with no rights, ie just for authentication). (As a side note, I plan to use this method.)

我将编写 Windows 服务以将用户添加到计算机（没有权限的用户，即仅用于身份验证）。（作为旁注，我打算使用这种方法。）

I want to be able to call this windows service from another computer.

我希望能够从另一台计算机调用此 Windows 服务。

How is this done? Is this a tall order? Would I be better off just creating a Web Service and hosting it in IIS?

这是怎么做的？这是一项艰巨的任务吗？只创建一个 Web 服务并将其托管在 IIS 中会更好吗？

I have some WCF services hosted in IIS on the calling computer (they will do the calling to the proposed windows service). I have found that Hosting in IIS is somewhat problematic, so I would rather not have a second IIS instance to manage unless I need to.

我在调用计算机上的 IIS 中托管了一些 WCF 服务（它们将调用建议的 Windows 服务）。我发现在 IIS 中托管有些问题，因此除非需要，否则我宁愿没有第二个 IIS 实例来管理。

(I will be using Visual Studio 2008 SP1, C# and Windows Server 2003 (for both caller and service host).

（我将使用 Visual Studio 2008 SP1、C# 和 Windows Server 2003（用于调用方和服务主机）。

Thanks for the help

谢谢您的帮助

采纳答案by DanO

If you are thinking of hosting a web service in IIS just to communicate with an NT-service on that same machine, that is definitelymore trouble than it is worth in this case.

如果您正在考虑在 IIS 中托管 Web 服务只是为了与同一台机器上的 NT 服务进行通信，那么在这种情况下，这肯定比值得的麻烦更多。

As other answers have indicated you can make a WCF service with the operations you need and host that within the same NT-service that you want to interact with. You can easily secure this with certificates, or user accounts to make sure it is only controlled by the right people/machines.

正如其他答案所表明的那样，您可以使用所需的操作制作 WCF 服务，并将其托管在您想要与之交互的同一个 NT 服务中。您可以使用证书或用户帐户轻松保护它，以确保它仅由正确的人员/机器控制。

If you need to control the NT-service itself, there are existing programs such as sc.exeto start, stop, configure, or query the status of your NT-service remotely.

如果您需要控制 NT 服务本身，则可以使用sc.exe等现有程序来远程启动、停止、配置或查询 NT 服务的状态。

However, you may want to consider seeking a solution without the overhead of creating an custom NT-service and a custom WCF service to interact with it. If you do, the Net Usercommands (sorry no link - new user limitation) or the AddUsers(see kb 199878/en-us) utility may be sufficient. If your remote "controller" can invoke these commands directly against the target machine you may not have to create any custom software address this need. Additionally you would have less software to maintain and administer on the target machine. You would just be using the built-in OS capabilities and admin utilities.

但是，您可能需要考虑寻求一种解决方案，而无需创建自定义 NT 服务和自定义 WCF 服务以与之交互。如果这样做，Net User命令（抱歉没有链接 - 新用户限制）或AddUsers（参见 kb 199878/en-us）实用程序可能就足够了。如果您的远程“控制器”可以直接针对目标机器调用这些命令，您可能不必创建任何自定义软件来满足此需求。此外，您需要在目标机器上维护和管理的软件更少。您只需使用内置的操作系统功能和管理实用程序。

Finally, you will need to think about the security aspect, NT-services and IIS are usually run under very restricted accounts, many auditors would flip-out over any service running with sufficient permission to create or modify users locally, and especially on other machines. You'll want to make sure that the service could never be used to create users that do have more than the "authenticate" permission you indicated.

最后，您需要考虑安全性方面，NT 服务和 IIS 通常在非常受限制的帐户下运行，许多审计员会翻转任何具有足够权限运行的服务来创建或修改本地用户，尤其是在其他机器上. 您需要确保永远不会使用该服务来创建拥有超过您指示的“身份验证”权限的用户。

Edit: The net usercommand may not work against another machine's local users, but check out. pspasswdthat along with PsExec to create users, should do what you need remotely.

编辑：net user命令可能不适用于另一台机器的本地用户，但请查看。pspasswd与 PsExec 一起创建用户，应该可以远程执行您需要的操作。

回答by Shea

If the windows service publishes a remoting interface then it can be accessed via that remoting interface.

如果 windows 服务发布了一个远程接口，那么它可以通过该远程接口访问。

Otherwise it's the same as accessing any other process running on a remote machine except that there may be some tools (e.g., sc) with built in support for executing against a remote machine (barring firewall complications).

否则，它与访问在远程机器上运行的任何其他进程相同，只是可能有一些工具（例如 sc）内置支持对远程机器执行（除非防火墙复杂）。

Any IPC mechanisms applies; sockets, web services, remoting, etc...

任何 IPC 机制都适用；套接字、Web 服务、远程处理等...

回答by Tad Donaghe

You could create a WCF service which will talk to your Windows service on the remote box. Host the WCF component in IIS (or however you'd like so that you can communicate with it) and then call the WCF component from your remote machine.

您可以创建一个 WCF 服务，该服务将与远程框上的 Windows 服务对话。在 IIS 中托管 WCF 组件（或者您愿意的任何方式，以便您可以与它通信），然后从远程计算机调用 WCF 组件。

回答by John Saunders

Simply host a WCF service in the Windows Service. You'll then be able to call it remotely.

只需在 Windows 服务中托管 WCF 服务。然后你就可以远程调用它了。

回答by Scott Marlowe

You can host a WCF service inside a Windows service. Take a look at the TCP binding (NetTcpBindingclass). Both client and server will have to use WCF, but that doesn't sound like it will be an issue with your implementation.

您可以在 Windows 服务中承载 WCF 服务。看一下 TCP 绑定（NetTcpBinding类）。客户端和服务器都必须使用 WCF，但这听起来不像是您的实现的问题。

Also, the section entitled "Hosting in Windows Services" in this MSDN articleprovides a walk-through of the process

此外，这篇MSDN 文章中标题为“在 Windows 服务中托管”的部分提供了该过程的演练

回答by jrista

You could expose a WCF service directly from your windows service. When you start up your windows service, in addition to spinning up any other background processes, you could create an instance of ServiceHost<T> for your service implementation. This would allow you to not only provide WCF access, but also avoid the extra instance of IIS like you requested, and provide TCP, Named Pipes, and WsHttp endpoints. This should give you some nice flexibility in the performance tuning arena, since it sounds like this service will be consumed internally on your network, rather than externally.

您可以直接从 Windows 服务公开 WCF 服务。当您启动 Windows 服务时，除了启动任何其他后台进程之外，您还可以为您的服务实现创建一个 ServiceHost<T> 实例。这将使您不仅可以提供 WCF 访问，还可以避免像您请求的那样额外的 IIS 实例，并提供 TCP、命名管道和 WsHttp 端点。这应该会在性能调整领域为您提供一些很好的灵活性，因为听起来此服务将在您的网络内部使用，而不是在外部使用。