How to detect which process changed system time?

  • Thread starter Thread starter Drasko
  • Start date Start date
D

Drasko

Using SystemEvent.TimeChanged I can find that system time has been changed,
but don't know how to find wich process initiated this. Any suggestions?

Thanks

Drasko
 
Hi,

AFAIK there is no way of knowing it.

DO a search in the windows NG ( not .net ) maybe there you find an answer.


cheers,
 
The OS doesn't keep track of the process who issued the command (called the
API), so there is no way to get at this info.

Willy.
 
Willy said:
The OS doesn't keep track of the process who issued the command (called the
API), so there is no way to get at this info.

Willy.
Click to expand...

Well, sorta. You *could* do this. I've never tried, but I would think
that hooking the API functions for every process and then keeping track
of who changed it would work. I wouldn't want to see the impact on
system performance tho.

Matt
 
Back
Top