ci: run PEDM simulator as LocalSystem using psexec

Author: CBenoit

.github/workflows/ci.yml

@@ -1011,6 +1011,17 @@ jobs:
       - name: Run PEDM simulator (limited test)
         run: ./crates/pedm-simulator/run-container.ps1
 
+      - name: Install PsExec
+        run: choco install pstools --yes
+
+      - name: Test PsExec
+        run: psexec -accepteula ipconfig
+
+      - name: Run PEDM simulator (LocalSystem test)
+        run: |
+          $scriptPath = Resolve-Path -Path "./crates/pedm-simulator/run-expect-elevated.ps1"
+          psexec -accepteula -i -s pwsh.exe $scriptPath
+
   success:
     name: Success
     runs-on: ubuntu-latest

crates/pedm-simulator/run-expect-elevated.ps1

@@ -0,0 +1,16 @@
+#!/bin/env pwsh
+
+$ErrorActionPreference = "Stop"
+
+Push-Location -Path $PSScriptRoot
+
+$exitCode = 0
+
+try {
+	$Env:PEDM_SIMULATOR_EXPECT_ELEVATION = '1'
+	& ./artifacts/pedm-simulator.exe
+	$exitCode = $LASTEXITCODE
+} finally {
+	Pop-Location
+	exit $exitCode
+}

crates/pedm-simulator/src/main.rs

@@ -122,7 +122,7 @@ fn main() -> anyhow::Result<()> {
     } else {
         match res {
             Ok(_) => {
-                anyhow::bail!("admin token creation should have failed, because the current process is not elevated")
+                anyhow::bail!("admin token creation succeded, but this was not expected")
             }
             Err(e) => {
                 assert_eq!(e.to_string(), "no token found for SE_CREATE_TOKEN_NAME privilege");