Ignore desktop creation errors in the sandbox.

sandbox/win/src/window.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "sandbox/win/src/window.h"
 
 #include <aclapi.h>
 
 #include <memory>
 
@@ skipping 28 matching lines @@
   // Get the security attributes from the current window station; we will
   // use this as the base security attributes for the new window station.
   HWINSTA current_winsta = ::GetProcessWindowStation();
   if (!current_winsta)
     return SBOX_ERROR_CANNOT_GET_WINSTATION;
 
   SECURITY_ATTRIBUTES attributes = {0};
   if (!GetSecurityAttributes(current_winsta, &attributes))
     return SBOX_ERROR_CANNOT_QUERY_WINSTATION_SECURITY;
 
-  // Create the window station using NULL for the name to ask the os to
+  // Create the window station using nullptr for the name to ask the os to
   // generate it.
   *winsta = ::CreateWindowStationW(
-      NULL, 0, GENERIC_READ | WINSTA_CREATEDESKTOP, &attributes);
+      nullptr, 0, GENERIC_READ | WINSTA_CREATEDESKTOP, &attributes);
+  if (*winsta == nullptr && ::GetLastError() == ERROR_ACCESS_DENIED) {
+    *winsta = ::CreateWindowStationW(
+        nullptr, 0, WINSTA_READATTRIBUTES | WINSTA_CREATEDESKTOP, &attributes);
+  }
   LocalFree(attributes.lpSecurityDescriptor);
 
   if (*winsta)
     return SBOX_ALL_OK;
 
   return SBOX_ERROR_CANNOT_CREATE_WINSTATION;
 }
 
 ResultCode CreateAltDesktop(HWINSTA winsta, HDESK* desktop) {
   base::string16 desktop_name = L"sbox_alternate_desktop_";
@@ skipping 96 matching lines @@
   if (winsta) {
     name = GetWindowObjectName(winsta);
     name += L'\\';
   }
 
   name += GetWindowObjectName(desktop);
   return name;
 }
 
 }  // namespace sandbox