WMIwatcher / trigger on logonsession?

[arjan]

Hi,

I found snippets on how you can define a processwatcher. It is based on
a WMI-query with a trigger. It uses the WqlEventQuery class.

Does anyone have a code snippet for the same functionality on the
Logonsessions within WMI?
The query that the trigger should be created on is "SELECT * FROM
Win32_LogonSession".... The goal is to recieve a trigger on a logon,
witch gives me the logontime and the userID

cheers

Trumpeteer

 

[Willy Denoyette [MVP]]

| Hi,
|
| I found snippets on how you can define a processwatcher. It is based on
| a WMI-query with a trigger. It uses the WqlEventQuery class.
|
| Does anyone have a code snippet for the same functionality on the
| Logonsessions within WMI?
| The query that the trigger should be created on is "SELECT * FROM
| Win32_LogonSession".... The goal is to recieve a trigger on a logon,
| witch gives me the logontime and the userID
|
| cheers
|
| Trumpeteer
|

ManagementEventWatcher w = null;
WqlEventQuery q = new WqlEventQuery();
q.EventClassName = "__InstanceOperationEvent";
q.WithinInterval = new TimeSpan(0,0,3); // query interval
q.Condition = @"TargetInstance ISA 'Win32_LogonSession'";
w = new ManagementEventWatcher( q);
w.EventArrived += new EventArrivedEventHandler(LogonEventArrived);
w.Start();
....
....

public void LogonEventArrived(object sender, EventArrivedEventArgs e) {
//Get the Event object and display it
foreach(PropertyData pd in e.NewEvent.Properties) {

Willy.

 

[arjan]

great!

Thanks a million!