Update comments for why to use LogonUser and CreateProcessAsUser in some cases

1 files changed, 4 insertions, 1 deletions

diff --git a/lib/mixlib/shellout/windows/core_ext.rb b/lib/mixlib/shellout/windows/core_ext.rb
index 7062ef7..e692c7d 100644
--- a/lib/mixlib/shellout/windows/core_ext.rb
+++ b/lib/mixlib/shellout/windows/core_ext.rb
@@ -266,7 +266,10 @@ module Process
 
       # If running in the service windows station must do a log on to get
       # to the interactive desktop.  Running process user account must have
-      # the 'Replace a process level token' permission
+      # the 'Replace a process level token' permission.  This is necessary as
+      # the logon (which happens with CreateProcessWithLogon) must have an 
+      # interactive windows station to attach to, which is created with the 
+      # LogonUser cann with the LOGON32_LOGON_INTERACTIVE flag.
       if winsta_name =~ /^Service-0x0-.*$/i
         token = FFI::MemoryPointer.new(:ulong)