window service: How to get timestamp when user logged in into the system

Question

Hi all,

I want to write a window service that send the email as soon as the user will logged in into the system(Computer).

I want to know the user and the time i.e. at what time he/she logs in.

With the help of system.security,principal i get the current user but how to get the loggin time.

Pease help!

Vulpes · Answer

I've changed the program a bit in an attempt to filter out the info you want: using System; using System.Management; class Test { static void Main() { var mos = new ManagementObjectSearcher("SELECT * FROM win32_LogonSession WHERE LogonType = 2"); foreach (ManagementObject mo in mos.Get()) { string logonId = mo["LogonId"].ToString(); uint logonType = (uint)mo["LogonType"]; var roq = new RelatedObjectQuery("ASSOCIATORS OF {Win32_LogonSession.LogonId='" + logonId + "'} WHERE AssocClass = Win32_LoggedOnUser Role = Dependent"); var mos2 = new ManagementObjectSearcher(roq); foreach(ManagementObject mo2 in mos2.Get()) { bool isLocal = (bool)mo2["LocalAccount"]; if (isLocal) { Console.WriteLine("LogonId : {0}", logonId); Console.WriteLine("LogonType : {0}", logonType); Console.WriteLine("User Name : {0}", mo2["Name"]); DateTime startTime = ManagementDateTimeConverter.ToDateTime(mo["StartTime"].ToString()); Console.WriteLine("Start time : {0}", startTime); Console.WriteLine(); } } } Console.ReadKey(); } }

Vulpes · Answer

If it's not now going into the first foreach() loop, then change the first line back to: var mos = new ManagementObjectSearcher("SELECT * FROM win32_LogonSession "); as evidently there are no sessions with a LogonType of 2 ('interactive') running on your machine. See here( http://msdn.microsoft.com/en-us/library/aa394189(VS.85).aspx ) for the types of sessions which are supported if you want to do your own filtering.

Vijay Yadav · Answer

ok!

Vulpes · Answer

Ah, that's good, Vijay ;) It's always nice to get some WMI code to work as the whole API is reminiscent of a vast partly-explored jungle :)

Vijay Yadav · Answer

Hi Vulpes, With the help of Logontype=10, its working. It is use for both remote and interactive. Anyway thanks a lot!

Sam Hobbs · Answer

No, I mean you can create one. You don't understand. I think if you just read about services you will quickly and easily find the answer.

Vijay Yadav · Answer

Hi Everyone, Thanks for your reply! @Vulpes - I tried this way but it is not going in 1st foreach loop when i debug. Hence no result. @Suthish - Yes, you are right. @Sam - There is in-built service but i need to create one. Sorry!!! for late reply guys.

Sam Hobbs · Answer

Isn't there a type of service that starts when a user logs in and stops when they log off?

Suthish Nair · Answer

Vijay, you are into a good project nowdays :)

Vijay Yadav · Answer

Hi Vuples, Thanks a lot for reply. It's working but i want the user name of the system, it is giving LogonId as "NT AUTHORITY\SYSTEM". I have attached file please see it!

Vulpes · Answer

There's probably an easier way but you can get the log in time (rather tortuously) using WMI as the following console app shows: using System; using System.Management; class Test { static void Main() { var mos = new ManagementObjectSearcher("SELECT * FROM win32_LogonSession "); foreach (ManagementObject mo in mos.Get()) { string logonId = mo["LogonId"].ToString(); Console.WriteLine("LogonId : {0}", logonId); var roq = new RelatedObjectQuery("ASSOCIATORS OF {Win32_LogonSession.LogonId='" + logonId + "'} WHERE AssocClass = Win32_LoggedOnUser Role = Dependent"); var mos2 = new ManagementObjectSearcher(roq); foreach(ManagementObject mo2 in mos2.Get()) { Console.WriteLine("User Name : {0}", mo2["Name"]); } DateTime startTime = ManagementDateTimeConverter.ToDateTime(mo["StartTime"].ToString()); Console.WriteLine("Start time : {0}", startTime); Console.WriteLine(); } Console.ReadKey(); } }