Ignore desktop creation errors in the sandbox.

sandbox/win/src/window.cc

Index: sandbox/win/src/window.cc
diff --git a/sandbox/win/src/window.cc b/sandbox/win/src/window.cc
index af834ca590463ad6ba6a35e32c234b1249683943..9bdf50f1adc3c6d7ae1b30d59d9e345d4eb38f8f 100644
--- a/sandbox/win/src/window.cc
+++ b/sandbox/win/src/window.cc
@@ -46,10 +46,14 @@ ResultCode CreateAltWindowStation(HWINSTA* winsta) {
   if (!GetSecurityAttributes(current_winsta, &attributes))
     return SBOX_ERROR_CANNOT_QUERY_WINSTATION_SECURITY;
 
-  // Create the window station using NULL for the name to ask the os to
+  // Create the window station using nullptr for the name to ask the os to
   // generate it.
   *winsta = ::CreateWindowStationW(
-      NULL, 0, GENERIC_READ | WINSTA_CREATEDESKTOP, &attributes);
+      nullptr, 0, GENERIC_READ | WINSTA_CREATEDESKTOP, &attributes);
+  if (*winsta == nullptr && ::GetLastError() == ERROR_ACCESS_DENIED) {
+    *winsta = ::CreateWindowStationW(
+        nullptr, 0, WINSTA_READATTRIBUTES | WINSTA_CREATEDESKTOP, &attributes);
+  }
   LocalFree(attributes.lpSecurityDescriptor);
 
   if (*winsta)