Barry Melek Electric Train Sets

Full Length Vista

Interaction between services and applications of user level in Windows Vista

Windows Vista, services and desktop

Before Vista appearance services and user applications in operating systems of Windows family could jointly use session 0. It was possible to easily open windows on the desktop of the current user directly from the service, and also to exchange data between the service and applications by means of window messages. But it became the serious security problem when the whole class of attacks appeared that used windows opened by the services to get access to the services themselves. The mechanism of counteraction to such attacks appeared only in Vista.

In Windows Vista all user logins and logouts are performed in the sessions that differ from the session 0. The possibility of opening windows on the user desktop by the services is very restricted, and if you try to start an application from the service it starts in session 0. Correspondingly if this application is interactive you have to switch to the desktop of session 0. The using of the window messages for data exchange is made considerably harder.

Such security policy is quite defensible. But what if nevertheless you need to start an interactive application on the user desktop from the service? This article describes one of the possible solution variants for this question. Moreover we’ll consider several ways of organization of data exchange between services and applications.

Starting interactive applications from the service

As soon as the service and desktop of the current user exist in the different sessions the service will have to “feign” this user to start the interactive applications. To do so we should know the corresponding login name and password or have the LocalSystem account. The second variant is more common so we’ll consider it.

So, we create the service with the LocalSystem account. First we should get the token of the current user. In order to do it we:

1. get the list of all terminal sessions;
2. choose the active session;
3. get token of the user logged to the active session;
4. copy the obtained token.

C++ code

You can see the corresponding code in C++ below.

PHANDLE GetCurrentUserToken() { PHANDLE currentToken = 0; PHANDLE primaryToken = 0; int dwSessionId = 0; PHANDLE hUserToken = 0; PHANDLE hTokenDup = 0; PWTS_SESSION_INFO pSessionInfo = 0; DWORD dwCount = 0; // Get the list of all terminal sessions WTSEnumerateSessions(WTS_CURRENT_SERVER_HANDLE, 0, 1, &pSessionInfo, &dwCount); int dataSize = sizeof(WTS_SESSION_INFO); // look over obtained list in search of the active session for (DWORD i = 0; i < dwCount; ++i) { WTS_SESSION_INFO si = pSessionInfo[i]; if (WTSActive == si.State) { // If the current session is active – store its ID dwSessionId = si.SessionId; break; } } // Get token of the logged in user by the active session ID BOOL bRet = WTSQueryUserToken(dwSessionId, currentToken); if (bRet == false) { return 0; } bRet = DuplicateTokenEx(currentToken, TOKEN_ASSIGN_PRIMARY | TOKEN_ALL_ACCESS, 0, SecurityImpersonation, TokenPrimary, primaryToken); if (bRet == false) { return 0; } return primaryToken; }

It should be mentioned that you can use WTSGetActiveConsoleSessionId() function instead of the looking over the whole list. This function returns the ID of the active session. But when I used it for the practical tasks I discovered that this function doesn’t always work while the variant with looking through the all sessions always gave the correct result.

If there are no logged in users for the current session then the function WTSQueryUserToken() returns FALSE with error code ERROR_NO_TOKEN. Naturally you can’t use the code given below in this case.

After we’ve got the token we can start an application on behalf of the current user. Pay attention that the rights of the application will correspond to the rights of the current user account and not the LocalSystem account.

The code is given below.

BOOL Run(const std::string& processPath, const std::string& arguments) { // Get token of the current user PHANDLE primaryToken = GetCurrentUserToken(); if (primaryToken == 0) { return FALSE; } STARTUPINFO StartupInfo; PROCESS_INFORMATION processInfo; StartupInfo.cb = sizeof(STARTUPINFO); SECURITY_ATTRIBUTES Security1; SECURITY_ATTRIBUTES Security2; std::string command = """ + processPath + """; if (arguments.length() != 0) { command += " " + arguments; } void* lpEnvironment = NULL; // Get all necessary environment variables of logged in user // to pass them to the process BOOL resultEnv = CreateEnvironmentBlock(&lpEnvironment, primaryToken, FALSE); if (resultEnv == 0) { long nError = GetLastError(); } // Start the process on behalf of the current user BOOL result = CreateProcessAsUser(primaryToken, 0, (LPSTR)(command.c_str()), &Security1, &Security2, FALSE, CREATE_NO_WINDOW | NORMAL_PRIORITY_CLASS | CREATE_UNICODE_ENVIRONMENT, lpEnvironment, 0, &StartupInfo, &processInfo); CloseHandle(primaryToken); return result; }

If the developed software will be used only in Windows Vista and later OSs then you can use CreateProcessWithTokenW() function instead of the CreateProcessAsUser(). It can be called for example in this way:

BOOL result = CreateProcessWithTokenW(primaryToken, LOGON_WITH_PROFILE, 0, (LPSTR)(command.c_str()), CREATE_NO_WINDOW | NORMAL_PRIORITY_CLASS | CREATE_UNICODE_ENVIRONMENT, lpEnvironment, 0, &StartupInfo, &processInfo);

C# code

Let’s implement the same functionality in C#. We create the class ProcessStarter that will be used in some subsequent examples. Here I describe only two main methods.

public static IntPtr GetCurrentUserToken() { IntPtr currentToken = IntPtr.Zero; IntPtr primaryToken = IntPtr.Zero; IntPtr WTS_CURRENT_SERVER_HANDLE = IntPtr.Zero; int dwSessionId = 0; IntPtr hUserToken = IntPtr.Zero; IntPtr hTokenDup = IntPtr.Zero; IntPtr pSessionInfo = IntPtr.Zero; int dwCount = 0; WTSEnumerateSessions(WTS_CURRENT_SERVER_HANDLE, 0, 1, ref pSessionInfo, ref dwCount); Int32 dataSize = Marshal.SizeOf(typeof(WTS_SESSION_INFO)); Int32 current = (int)pSessionInfo; for (int i = 0; i < dwCount; i++) { WTS_SESSION_INFO si = (WTS_SESSION_INFO)Marshal.PtrToStructure ((System.IntPtr)current, typeof(WTS_SESSION_INFO)); if (WTS_CONNECTSTATE_CLASS.WTSActive == si.State) { dwSessionId = si.SessionID; break; } current += dataSize; } bool bRet = WTSQueryUserToken(dwSessionId, out currentToken); if (bRet == false) { return IntPtr.Zero; } bRet = DuplicateTokenEx(currentToken, TOKEN_ASSIGN_PRIMARY | TOKEN_ALL_ACCESS, IntPtr.Zero, SECURITY_IMPERSONATION_LEVEL.SecurityImpersonation, TOKEN_TYPE.TokenPrimary, out primaryToken); if (bRet == false) { return IntPtr.Zero; } return primaryToken; } public void Run() { IntPtr primaryToken = GetCurrentUserToken(); if (primaryToken == IntPtr.Zero) { return; } STARTUPINFO StartupInfo = new STARTUPINFO(); processInfo_ = new PROCESS_INFORMATION(); StartupInfo.cb = Marshal.SizeOf(StartupInfo); SECURITY_ATTRIBUTES Security1 = new SECURITY_ATTRIBUTES(); SECURITY_ATTRIBUTES Security2 = new SECURITY_ATTRIBUTES(); string command = """ + processPath_ + """; if ((arguments_ != null) && (arguments_.Length != 0)) { command += " " + arguments_; } IntPtr lpEnvironment = IntPtr.Zero; bool resultEnv = CreateEnvironmentBlock(out lpEnvironment, primaryToken, false); if (resultEnv != true) { int nError = GetLastError(); } CreateProcessAsUser(primaryToken, null, command, ref Security1, ref Security2, false, CREATE_NO_WINDOW | NORMAL_PRIORITY_CLASS | CREATE_UNICODE_ENVIRONMENT, lpEnvironment, null, ref StartupInfo, out processInfo_); CloseHandle(primaryToken); }

Also we must mention that there is a very good article about the launching of the user-level application from the service with the LocalSystem account privivleges. It is located here: http://www.codeproject.com/KB/vista-security/VistaSessions.aspx

Data exchange between the service and application

It remained only to solve the problem of data exchange between the service and applications. You can use a number of options: sockets, named memory mapped files, RPC and COM. Here we will consider the three easiest ways: text files, events (for C#) and named pipes (for C++).

Text files

One of the simplest solutions is to use text files. When we talk about C# development the most natural is to use XML files.

For example, we must pass some data string from the user-level application to the service. For a start, we must decide where the mediator file should be created. The location must be accessible both for the application and the service.

If the application was started with the permissions of the current logged-in user, the good solution would be to use the “My documents” folder of that user. In this case there will be no access problems from the both sides (as the LocalSystem service has the permissions to access almost everywhere).

So, let’s create the XML-file “sample.xml” in the current user’s “My Documents” folder:

using System.Xml; XmlWriterSettings xmlWriterSettings = new XmlWriterSettings(); // provide the XML declaration xmlWriterSettings.OmitXmlDeclaration = false; // write attributes on the new line xmlWriterSettings.NewLineOnAttributes = true; // indent elements xmlWriterSettings.Indent = true; // get “My Documents” folder path String myDocumentsPath = Environment.GetFolderPath(Environment.SpecialFolder. MyDocuments); String sampleXmlFilePath = Path.Combine(myDocumentsPath,”sample.xml”); // create the XML file “sample.xml” sampleXmlWriter = XmlWriter.Create(sampleXmlFilePath, xmlWriterSettings);

Now we will create the “SampleElement” element which some useful data would be passed to:

sampleXmlWriter.WriteStartElement("SampleElement"); sampleXmlWriter.WriteElementString("Data", "Hello");

Let’s finish the file creation:

sampleXmlWriter.WriteEndElement(); sampleXmlWriter.Flush(); sampleXmlWriter.Close();

And now the service must open that file. To have the access to it the service must get the current user’s “My Documents” folder path. In order to do it we should make an impersonation by means of the operation of getting the token described above:

// Get token of the current user IntPtr currentUserToken = ProcessStarter.GetCurrentUserToken(); // Get user ID by the token WindowsIdentity currentUserId = new WindowsIdentity(currentUserToken); // Perform impersonation WindowsImpersonationContext impersonatedUser = currentUserId.Impersonate(); // Get path to the ”My Documents” String myDocumentsPath = Environment.GetFolderPath(Environment.SpecialFolder. MyDocuments); // Make everything as it was impersonatedUser.Undo();

Now the service can read the data from the “sample.xml” file:

String sampleXmlFilePath = Path.Combine(myDocumentsPath,”sample.xml”); XmlDocument oXmlDocument = new XmlDocument(); oXmlDocument.Load(sampleXmlFilePath); XPathNavigator oPathNavigator = oXmlDocument.CreateNavigator(); XPathNodeIterator oNodeIterator = oPathNavigator.Select("/SampleElement/Data"); oNodeIterator.MoveNext(); String receivedData = oNodeIterator.Current.Value;

Data exchange via the text files is very simple for implementation but it has a number of disadvantages. There can be not enough disk space; user can directly meddle in the data record process etc. So let’s consider another ways.

Events

In the trivial case when we need to transmit only information of “yes/no” type (answer on the dialog window question, message if the service should be stopped or not and so on) we can use Events.
Let’s consider an example. The functioning of the some application “sample” should be paused in the certain point until the service gives a command to continue.

The “sample” application is started from the service by means of the already considered class ProcessStarter (in C#):

ProcessStarter sampleProcess = new ProcessStarter(); sampleProcess.ProcessName = "sample"; sampleProcess.ProcessPath = @"C:Basesample.exe"; sampleProcess.Run();

Now we create the global event SampleEvent in that point of the “sample” application where it should stop and wait for the command from the service. We stop the thread until the signal comes:

using System.Threading; EventWaitHandle sampleEventHandle = new EventWaitHandle(false, EventResetMode.AutoReset, "Global\SampleEvent"); bool result = sampleEventHandle.WaitOne();

We open the global event SampleEvent in that point of the service where it’s necessary to send the command to the application. We set this event to the signal mode:

EventWaitHandle handle = EventWaitHandle.OpenExisting("Global\SampleEvent"); bool setResult = handle.Set();

Application gets this signal and continues its functioning.

Named pipes

If we talk about big volumes of data in exchange process we can use named pipe technology. We must mention that the code below is provided in C++ as the classes for working with the named pipes in C# were introduced only since .NET Framework 3.5. If you want to know how to use these new .NET tools for working with the named pipes you can read, for example, this article

Let’s suppose that an application periodically needs to send some number of unsigned int type to the service.

In this case we can open the named pipe on the service side and then monitor its state in the separated thread to read and process data when they come. So we create the pipe DataPipe in the service code:

HANDLE CreatePipe() { SECURITY_ATTRIBUTES sa; sa.lpSecurityDescriptor = (PSECURITY_DESCRIPTOR)malloc(SECURITY_DESCRIPTOR_MIN_LENGTH); if (!InitializeSecurityDescriptor(sa.lpSecurityDescriptor, SECURITY_DESCRIPTOR_REVISION)) { DWORD er = ::GetLastError(); } if (!SetSecurityDescriptorDacl(sa.lpSecurityDescriptor, TRUE, (PACL)0, FALSE)) { DWORD er = ::GetLastError(); } sa.nLength = sizeof sa; sa.bInheritHandle = TRUE; // To know the maximal size of the received data for reading from the // pipe buffer union maxSize { UINT _1; }; HANDLE hPipe = ::CreateNamedPipe((LPSTR)"\\.\pipe\DataPipe", PIPE_ACCESS_INBOUND, PIPE_TYPE_MESSAGE | PIPE_READMODE_MESSAGE | PIPE_WAIT, PIPE_UNLIMITED_INSTANCES, sizeof maxSize, sizeof maxSize, NMPWAIT_USE_DEFAULT_WAIT, &sa); if (hPipe == INVALID_HANDLE_VALUE) { DWORD dwError = ::GetLastError(); } return hPipe; }

We also create the function to check the thread state and perform reading if required:

unsigned int __stdcall ThreadFunction(HANDLE& hPipe) { while (true) { BOOL bResult = ::ConnectNamedPipe(hPipe, 0); DWORD dwError = GetLastError(); if (bResult || dwError == ERROR_PIPE_CONNECTED) { BYTE buffer[sizeof UINT] = {0}; DWORD read = 0; UINT uMessage = 0; if (!(::ReadFile(hPipe, &buffer, sizeof UINT, &read, 0))) { unsigned int error = GetLastError(); } else { uMessage = *((UINT*)&buffer[0]); // The processing of the received data } ::DisconnectNamedPipe(hPipe); } else { } ::Sleep(0); } }

And finally start the separate thread with ThreadFunction() function:

unsigned int id = 0; HANDLE pipeHandle = CreatePipe(); ::CloseHandle((HANDLE)::_beginthreadex(0, 0, ThreadFunction, (void*) pipeHandle, 0, &id));

Now we go to the application side and organize sending of data to the service via named pipe.

SendDataToService(UINT message) { HANDLE hPipe = INVALID_HANDLE_VALUE; DWORD dwError = 0; while (true) { hPipe = ::CreateFile((LPSTR)"\\.\pipe\DataPipe", GENERIC_WRITE, 0, 0, OPEN_EXISTING, 0, 0); dwError = GetLastError(); if (hPipe != INVALID_HANDLE_VALUE) { break; } // If any error except the ERROR_PIPE_BUSY has occurred, // we should return FALSE. if (dwError != ERROR_PIPE_BUSY) { return FALSE; } // The named pipe is busy. Let’s wait for 20 seconds. if (!WaitNamedPipe((LPSTR)"\\.\pipe\DataPipe", 20000)) { dwError = GetLastError(); return FALSE; } } DWORD dwRead = 0; if (!(WriteFile(hPipe, (LPVOID)&message, sizeof UINT, &dwRead, 0))) { CloseHandle(hPipe); return FALSE; } CloseHandle(hPipe); ::Sleep(0); return TRUE; }

Conclusion

There is no one and only right solution for the problem of interaction between services and applications in Windows Vista. There are a lot of mechanisms and you should choose the proper one in correspondence with the concrete problem. Unfortunately a lot of variants of such interaction organization were left behind this article scope. The usage of some of such technologies in the terms of C# are discussed, for example, in this article: http://www.codeproject.com/KB/threads/csthreadmsg.aspx

To learn this question deeper and a lot of features of developing for Windows Vista we also recommend the book by Michael Howard, David LeBlanc - Writing Secure Code for Windows Vista (Microsoft Press, 2007).

Attached Files (see here):

About the Author

Safco Vista Drawing Table Top $72.99 0% 1 1 Each 30" 30" Length x 40" Width x 0.75" Thickness 3950 40" Vista drawing tabletop features durable 3/4" melamine tops and a tilt up to 45 degrees. Easy access control knobs simplify base height adjustments from 30" to 46". Heavy-duty tubular steel base features a full-width footrest. Vista drawing table base adjusts in height. Tabletop and base sold separately. Drafting Table Top Durable Melamine Melamine - Top No Rectangle Safco Safco Products Tilt Vista Vista Drawing Table Top White Yes www.safcoproducts.com

Vista Real La Antigua $266.67 Vista Real La Antigua is located in central Antigua Guatemala, close to Antigua Cathedral, Parque Central, and La Merced Church. Regional points of interest also include Volcan de Agua and Acatenango. Hotel Features. Vista Real La Antigua's restaurant serves breakfast, lunch, and dinner. Room service is available. The hotel serves full breakfasts each morning in the restaurant (surcharges apply). This 3.5 star property offers a meeting/conference room and secretarial services. This Antigua Guatemala property has 275 square feet of event space consisting of banquet facilities. For a surcharge, the property offers a roundtrip airport shuttle (available on request). Guest parking is available for a surcharge. Additional property amenities include a concierge desk and currency exchange. This is a smoke free property. Guestrooms. All guestrooms at Vista Real La Antigua feature fireplaces and windows that open. Accommodations offer garden or courtyard views. Rooms are individually decorated and furnished. Bathrooms feature bathtubs or showers, televisions, and designer toiletries. Wired high speed and wireless Internet access is complimentary. Plasma televisions have cable channels. Guestrooms are all non smoking. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: A 12 percent city/local tax will be charged10 percent tourism fee will be charged We have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.The following fees and deposits are charged by the property at time of service, check in, or check out. Full breakfast fee: GTQ 85 per person (approximate amount) The above list may not be comprehensive. Fees and deposits may not include tax and are subject to change. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: A 12 percent city/local tax will be charged10 percent tourism fee will be charged We have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.The following fees and deposits are charged by the property at time of service, check in, or check out. Full breakfast fee: GTQ 85 per person (approximate amount) The above list may not be comprehensive. Fees and deposits may not include tax and are subject to change.

Hotel Vista Pattaya $71.99 Hotel Vista Pattaya is located near the beach in central Pattaya and close to Pattaya Beach, Alcazar Cabaret, and Tiffanys Show Pattaya. Nearby points of interest also include Pattaya City Hall and CentralFestival Shopping Center. Hotel Features. Dining options at Hotel Vista Pattaya include a restaurant and a coffee shop/caf?. A poolside bar and a bar/lounge are open for drinks. Room service is available 24 hours a day. The hotel serves a complimentary breakfast. Recreational amenities include an outdoor pool, a children's pool, a health club, a sauna, and a fitness facility. Spa amenities include spa services and massage/treatment rooms. This 3 star property offers small meeting rooms and a meeting/conference room. Complimentary wireless Internet access is available in public areas. This Pattaya property has event space consisting of banquet facilities and conference/meeting rooms. The property offers a roundtrip airport shuttle (surcharge). Guest parking is complimentary. Additional property amenities include a rooftop terrace, multilingual staff, and gift shops/newsstands. The property has designated areas for smoking. Guestrooms. 135 air conditioned guestrooms at Hotel Vista Pattaya feature minibars and laptop compatible safes. Balconies offer city or pool views. Beds come with premium bedding. Refrigerators and coffee/tea makers are offered. Bathrooms feature shower/tub combinations, bathrobes, slippers, and complimentary toiletries. Wireless Internet access is complimentary. In addition to desks and complimentary newspapers, guestrooms offer direct dial phones. 32 inch LCD televisions have premium satellite channels. Also included are complimentary bottled water and safes. Guests may request in room massages, irons/ironing boards, and wake up calls. Housekeeping is available daily. Guestrooms are all non smoking. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: New Year's Eve (31 December) Gala Dinner per adult: THB 2800New Year's Eve (31 December) Gala Dinner per child: THB 1400 (from 4 to 11 years old) We have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.The following fees and deposits are charged by the property at time of service, check in, or check out. Full breakfast fee: THB 300 per person (approximate amount) The above list may not be comprehensive. Fees and deposits may not include tax and are subject to change. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: New Year's Eve (31 December) Gala Di

The Buena Vista Palace Hotel & Spa $219 The Buena Vista Palace Hotel & Spa is a family friendly resort located in Lake Buena Vista's Downtown Disney? area/Lake Buena Vista neighborhood, close to Downtown Disney area, DisneyQuest, and Lake Buena Vista Golf Course. Additional points of interest include Typhoon Lagoon and Epcot. Resort Features. Dining options at The Buena Vista Palace Hotel & Spa include a restaurant and a coffee shop/caf?. A poolside bar is open for drinks. Room service is available during limited hours. Recreational amenities include 3 outdoor swimming pools. Also located on site are a children's pool, outdoor tennis courts, a spa tub, a sauna, and a fitness facility. The property's full service health spa has body treatments, massage/treatment rooms, facials, and beauty services. This 4 star property has a business center and offers small meeting rooms, secretarial services, and limo/town car service. Wireless and wired high speed Internet access is available in public areas (surcharges apply). This Lake Buena Vista property has 90,000 square feet of event space consisting of a conference center, banquet facilities, conference/meeting rooms, and a ballroom. The property has a theme park shuttle, which is complimentary. Business services, wedding services, and tour/ticket assistance are available. Self parking is complimentary. Additional property amenities include a concierge desk, an arcade/game room, and multilingual staff. Guestrooms. 1014 air conditioned guestrooms at The Buena Vista Palace Hotel & Spa feature coffee/tea makers and safes. All accommodations have balconies. Beds come with pillowtop mattresses and premium bedding. Bathrooms feature shower/tub combinations with handheld showerheads. They also offer makeup/shaving mirrors and designer toiletries. Wired high speed and wireless Internet access is complimentary. In addition to desks, guestrooms offer multi line phones with voice mail. 32 inch flat panel televisions have premium satellite channels and pay movies. Rooms also include windows that open and blackout drapes/curtains. Guests may request a turndown service, hypo allergenic bedding, and wake up calls. Housekeeping is available daily. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: Resort fee: USD 19.07 per accommodation, per nightHotel resort fee inclusions:Internet access in guestroomPhone calls (ltd local/long distance)Newspaper (daily)Use of poolUse of spa tubUse of fitness centerUse of sporting facilities or equipmentUse of in room safeIn room coffeeSelf parkingWe have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.The following fees and deposits are charged by the property at time of service, check in, or check out. Valet park

Boracay Grand Vista Resort & Spa $164.93 Boracay Grand Vista Resort & Spa is located near the beach in Boracay and close to Diniwid Beach, Balinghai Beach, and Willy's Rock. Nearby points of interest also include Budget Mart and Puka Beach. Hotel Features. Boracay Grand Vista Resort & Spa's restaurant serves breakfast, lunch, and dinner. A swim up bar and a bar/lounge are open for drinks. The hotel serves a complimentary buffet breakfast each morning in the restaurant. Recreational amenities include an outdoor pool. The property's full service health spa has massage/treatment rooms. This 4 star property has a business center and offers small meeting rooms. Complimentary wireless Internet access is available in public areas. Complimentary shuttle services include a beach shuttle and a shopping center shuttle. Complimentary guest parking is limited, and available on a first come, first served basis. Additional property amenities include laundry facilities. Guestrooms. 41 air conditioned guestrooms at Boracay Grand Vista Resort & Spa feature private pools and minibars. All accommodations have balconies. Bathrooms feature bathrobes, complimentary toiletries, and hair dryers. Wireless Internet access is complimentary. In addition to safes, guestrooms offer direct dial phones. Flat panel televisions have cable channels and DVD players. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: Christmas Day (25 December) Gala Dinner per adult: USD 50 Christmas Day (25 December) Gala Dinner per child: USD 25 (from 1 to 12 years old) New Year's Eve (31 December) Gala Dinner per adult: USD 50New Year's Eve (31 December) Gala Dinner per child: USD 25 (from 1 to 12 years old)Chinese New Year Gala Dinner per adult: USD 50Chinese New Year Gala Dinner per child: USD 25 (up to 12 years old) We have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.The following fees and deposits are charged by the property at time of service, check in, or check out. Airport shuttle fee: USD 30 per person (roundtrip)Buffet breakfast fee: USD 13 per person (approximate amount)Rollaway bed fee: USD 40 per nightCrib (infant bed) fee: USD 12 per night The above list may not be comprehensive. Fees and deposits may not include tax and are subject to change. Notifications and Fees:Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: Christmas Day (25 December) Gala Dinner per adult: USD 50 Christmas Day (25 December) Gala Dinner per child: USD 25 (from 1 to 12 years old) New Year's Eve (31 December) Gala Dinner per adult: USD 50New

Columbia - Zenith Vista Jacket (Black) - Apparel $156.99 6pm.com is proud to offer the Columbia - Zenith Vista Jacket (Black) - Apparel: Reach a new high point with the sleek styling and performance-minded features of this Zenith Vista Jacket from Columbia. ; A trench-style jacket that's built with high-performance features. ; Omni-Heat thermal reflective lining improves heat retention for insane warmth in a lightweight package. ; Omni-Tech technology for a breathable waterproof layer that's fully seam sealed. ; Removable and adjustable storm hood. ; Full-zip closure with traditional buttoned flap. ; Removable belt for a figure-flattering fit. ; Two front flap zip pockets. ; Adjustable button-tab cuffs. ; Interior media pocket. ; Shell: 89% nylon, 11% elastane. Lining: 100% polyester. Insulation: 50% polyester, 50% recycled polyester. ; Machine wash cold, tumble dry low. ; Length: 33 in ; Chest Measurement: 38 in ; Sleeve Length: 34 in ; Neck Circumference: 20 in ; Product measurements were taken using size MD. Please note that measurements may vary by size.

Windows Vista $39.99 The Ultimate Windows Vista Resource. Take full advantage of the high-performance features available in Microsoft Windows Vista and experience the power of this integrated, next-generation operating system. Windows Vista: The Complete Reference shows you how to install and configure Windows Vista for optimal performance, customize the streamlined new desktop, display sidebars and gadgets, and enjoy all the entertainment capabilities, including music, movies, and games. Find out how to manage your files, install software and hardware, and use the latest Internet technologies. You'll also learn to secure your system, back up and restore your files, and set up a Local Area Network (LAN) so you can share resources. Filled with clear screenshots and detailed explanations, this is your one-stop guide to mastering Windows Vista.: Customize your desktop with new UI components; Use the new User Account Control (UAC)  to prevent unauthorized changes to your computer; Manage files and folders using Windows Flip 3D and Windows Live Taskbar thumbnails; Protect your files using the Backup and Restore Center; Manage and edit your photos with the new Windows Photo Gallery; Keep track of your appointments with the new Windows Calendar; Use Windows Media Center to record live TV and radio, view digital photos, play music, and burn CDs and DVDs; Connect to the Internet and use Windows Mail, Internet Explorer 7, and Windows Live Messenger; Secure your PC and use Windows Update; Troubleshoot and tune Windows Vista for maximum performance

Savoir Full Length Trousers $3.99 Savoir Full Length Trousers

Grand Vista Hotel $55 The Grand Vista Hotel is a recently remodeled 3-diamond AAA rated full service hotel

Black Full Length Petticoat $27.99 Black Full Length Petticoat

Full Length Performance Header $469.99 Full Length Performance Header; Chrome; 1.625 in.; Full Length;

Verdi Full Length $29.99 Verdi Full Length - Photographic Print

Vista Hotel $192 Vista Hotel is located near the beach in Eilat and close to North Beach and Dolphin Reef. Additional area points of interest include Coral Beach and Shlomo Mountain. Hotel Features. Vista Hotel features a restaurant, a poolside bar, and a bar/lounge. Room service is available. The hotel serves a complimentary buffet breakfast. Recreational amenities include an outdoor pool, a fitness facility, and a children's club. This 3 star property offers a meeting/conference room and business services. Complimentary wireless Internet access is available in public areas. This Eilat property has 60 square feet of event space consisting of conference/meeting rooms. Guest parking is complimentary. Additional property amenities include a rooftop terrace, a marina, and an arcade/game room. This is a smoke free property. Guestrooms. 84 air conditioned guestrooms at Vista Hotel feature coffee/tea makers and safes. Accommodations offer city, mountain, or desert views. Bathrooms feature shower/tub combinations and hair dryers. Wireless Internet access is complimentary. In addition to complimentary newspapers, guestrooms offer phones. 20 inch LCD televisions have cable channels and free movie channels. Housekeeping is available daily. Notifications and Fees:A resort fee is included in the total price displayed Minimum Spring Break check in age is 21 years old. No pets, including service animals, are allowed at this property. Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: All citizens of Israel will be charged the national value added tax We have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.Additional fees and deposits may be charged by the property at time of service, check in, or check out. Notifications and Fees:A resort fee is included in the total price displayed Minimum Spring Break check in age is 21 years old. No pets, including service animals, are allowed at this property. Some properties have extra fees for amenities or services that may apply even if you do not use them. Government fees or taxes also may be charged to you when you check in or check out. This property told us they will charge you for the following: All citizens of Israel will be charged the national value added tax We have included all charges provided to us by the property. However, charges can vary, for example, based on length of stay or the room you book.Additional fees and deposits may be charged by the property at time of service, check in, or check out.

DreamLine Vista 34x58-inch Clear Glass Shower Enclosure $2229.41 The flowing semi-frameless design of the DreamLine Vista shower enclosure offers a beautiful and functional solution for installation of a large shower or a tub-to-shower conversion project. This shower door is crafted of tempered glass.Tempered 5/16-inch clear glass Pivot door with full-length magnetic door latchReversible for 'left' and 'right' wall installations Three integrated glass shelves in enclosed door compartmentAnodized aluminum profilesVisible fixtures in chrome finishDesigned to be installed against finished wallsMaterials: Tempered glass, aluminum profiles Dimensions: 56 5/8 inches W x 33 inches L x 72 7/8 inches HANSI certifiedAssembly required

Bella Vista $100 Bella Vista offers 2 fitness facilities, 126 holes of golf, 12 lighted tennis courts, 3 country clubs, 3 swimming pools, 10 parks with picnic pavillions, 8 lakes, fishing, swimming and boating, yacht club and full service marina, nature and hiking trails. 3 Bedroom/2 Bathroom Premium TownhouseThis spacious unit comes equipped with the luxuries of home. Unit bedding varies. Unit sleeps 8. 4 Bedroom/3 Bathroom Premium TownhouseThis spacious 4 bedroom/3 bathroom unit comes equipped with the luxuries of home. Unit sleeps 10.2 bedroom/2 bathroom TownhouseThis two bedroom, two bath townhouse features all the amenities and necessities for contemporary living, including wireless Internet access, DVD player, cable TV, washer/dryer, and a comfortable king sized bed in the master suite. A golf course view from the quiet deck makes for a enjoyable stay. Unit bedding varies. Maximum occupancy 4. Unit Amenities DeckDVDFireplaceFully Equipped UnitJacuzzi TubKitchen Fully EquippedMicrowaveNon SmokingPatioPets Not AllowedPrivate GarageRefrigeratorTVVCRWasher/Dryer

Floris V, Full-Length $39.99 Floris V, Full-Length - Giclee Print

Full Length Portrait of a Nurse $24.99 Full Length Portrait of a Nurse - Photographic Print

Cibola Vista Resort & Spa $81 Cibola Vista offers a wonderful vacation experience for you and your family featuring a Lagoon pool with waterslide and lap pool, Adults only pool with cafe and Jacuzzi, full service spa, fitness center, full size tennis court, onsite horseback riding, and daily activities for all ages

Full-Length Self-Portrait $39.99 Francisco de Goya Full-Length Self-Portrait - Giclee Print