Hi
Of course i know that the information can be found in the HKCU, the Users Registry.
But i have a Windows-Services, running under Local-Service rights that catch all events of login and logout of each user via the Windows Terminal Service API (WTS, now called Remote Desktop Service API).
This server is then sending the informations of the users to server. The User can't stop or change anything releated to this service, so there is no fake logout.
So the point is, microsoft is providing a API to retrieve the information, but it isn't used/filled in by vmware.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa383861%28v=vs.85%29.aspx
I don't think its easy and the normal way to read from the users registry with a service running under local-service account rights.
Greetings
Phil
Here the story in c# with cassia, my code is free to use.
protected override void OnSessionChange(SessionChangeDescription changeDescription)
{
_log.Debug("OnSessionChange triggered.");
// Inform the base class of the change as well
base.OnSessionChange(changeDescription);
// Use a switch block to segment the actions to perform for
// different session changes
switch (changeDescription.Reason)
{
case SessionChangeReason.SessionLogon:
{
_log.Debug("SessionLogon...");
string username = "";
string clientAddress = ""; //used for rdp clients
try
{
ITerminalServicesManager manager = new TerminalServicesManager();
using (ITerminalServer server = manager.GetLocalServer())
{
ITerminalServicesSession session = server.GetSession(changeDescription.SessionId);
//username (each user gets a connection.)
username = session.UserName;
//when the user connects via a remote session, get the origin address
if (session.ClientIPAddress != null)
{
clientAddress = session.ClientIPAddress.ToString();
}
}
m_connections.Create(changeDescription.SessionId).SendLogonInfo(username, clientAddress);
//log if requested
_log.Debug("SessionLogon Done, Session: '" + changeDescription.SessionId .ToString() + "', Username: '" + username + "'.");
}
catch (Exception ex)
{
_log.Error("SessionLogon Exception: " + ex.Message);
}
}
break;
case SessionChangeReason.SessionLogoff:
{
_log.Debug("SessionLogoff...");
string username = "";
//logoff
try
{
//username (each user gets a connection.)
ITerminalServicesManager manager = new TerminalServicesManager();
using (ITerminalServer server = manager.GetLocalServer())
{
ITerminalServicesSession session = server.GetSession(changeDescription.SessionId);
//username (each user gets a connection.)
username = session.UserName;
}
m_connections.Create(changeDescription.SessionId).SendLogoffInfo(username);
//log if requested
_log.Debug("SessionLogoff Done, Session: '" + changeDescription.SessionId.ToString() + "', Username: '" + username + "'.");
}
catch (Exception ex)
{
_log.Error("SessionLogoff, Exception: " + ex.Message);
}
//remove connection
try
{
//username (each user gets a connection.)
m_connections.Delete(changeDescription.SessionId);
}
catch (Exception ex)
{
_log.Error("SessionLogoff, remove Connection, Exception: " + ex.Message);
}
}
break;
}//switch
}//OnSessionChange()
