RDP Login Notification in Kernel Driver

NTDEV
1

I need RDP User login to Windows Terminal server notification in Kernel Driver module.
Any input will be appreciable.

regards

2

I’m not aware of any way to get this notification in Kernel. What I have done in the past is use a usermode notification in a service, and then send down a message to my driver. We have used the service control handler with SERVICE_CONTROL_SESSIONCHANGE and WTS_CONSOLE_CONNECT or WTS_REMOTE_CONNECT to get the usermode notification.

1 Like
3

Thanks Jeremy for the input, I will explore.