Wow, cool, can you guys give me a possible use for that ? I mean, what kind
of driver would need to be aware of user logoffs ?
ALberto.
-----Original Message-----
From: Michal Vodicka [mailto:xxxxx@veridicom.cz.nospam]
Sent: Tuesday, April 15, 2003 3:43 PM
To: NT Developers Interest List
Subject: [ntdev] RE: How to get user login or logoff notifications in
driver ?
It is right but my experience says it doesn’t work as expected always.
First, you may not receive logoff notification immediately after user
logoff. It can take several minutes, sometimes until next logon. Second, for
the first interractive session you may not receive logoff notification at
all (first mean nobody if logged on, it works for subsequent fast user
switching sessions). It seems appropriate kernel structure reference count
never reaches zero. It can be a bug (tested with w2k and XP SP0) or a
problem with my driver, it is some time I played with. If somebody have
different experience, info welcome.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]
From: xxxxx@nryan.com[SMTP:xxxxx@nryan.com]
Reply To: xxxxx@lists.osr.com
Sent: Tuesday, April 15, 2003 9:28 AM
To: xxxxx@lists.osr.com
Subject: [ntdev] RE: How to get user login or logoff notifications in
driver ?For logoff you can use:
SeRegisterLogonSessionTerminatedRoutine
SeMarkLogonSessionForTerminationNotification
SeUnregisterLogonSessionTerminatedRoutine
- Nicholas Ryan
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of subodh gupta
Sent: Monday, April 14, 2003 11:25 PM
To: NT Developers Interest List
Subject: [ntdev] How to get user login or logoff notifications in driver
?Hi All,
Is it possible to get the notification of user login,Logoff and User
Credentials Information in a Driver ?
If Yes How ? Is there some notification routine Provided ?
I know that a user mode NT service can get the notification of
Logoff,and i also know how to detect logon using winlogon process
detection…But is there some kernel mode APIs available for the same ?Any Help is appreciated…
Regards…
Subodh Radheshyam Gupta
You are currently subscribed to ntdev as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: michal.vodicka@st.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
You are currently subscribed to ntdev as: xxxxx@compuware.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
The contents of this e-mail are intended for the named addressee only. It
contains information that may be confidential. Unless you are the named
addressee or an authorized designee, you may not copy or use it, or disclose
it to anyone else. If you received it in error please notify us immediately
and then destroy it.