window service: How to get timestamp when user logged in into the system

Question

Hi all I want to write a window service that send the email as soon as the user will logged in into the system(Computer). I want to know the user and the time i.e. at what time he/she logs in. With the help of system.securityprincipal i get the current user but how to get the loggin time. Pease help!

Vulpes · Answer

I've changed the program a bit in an attempt to filter out the info you want: using System; using System.Management; class Test { static void Main() { var mos = new ManagementObjectSearcher(SELECT * FROM win32_LogonSession WHERE LogonType = 2); foreach (ManagementObject mo in mos.Get()) { string logonId = mo[LogonId].ToString(); uint logonType = (uint)mo[LogonType]; var roq = new RelatedObjectQuery(ASSOCIATORS OF {Win32_LogonSession.LogonId=' + logonId + '} WHERE AssocClass = Win32_LoggedOnUser Role = Dependent); var mos2 = new ManagementObjectSearcher(roq); foreach(ManagementObject mo2 in mos2.Get()) { bool isLocal = (bool)mo2[LocalAccount]; if (isLocal) { Console.WriteLine(LogonId : {0} logonId); Console.WriteLine(LogonType : {0} logonType); Console.WriteLine(User Name : {0} mo2[Name]); DateTime startTime = ManagementDateTimeConverter.ToDateTime(mo[StartTime].ToString()); Console.WriteLine(Start time : {0} startTime); Console.WriteLine(); } } } Console.ReadKey(); } }

Vulpes · Answer

If it's not now going into the first foreach() loop then change the first line back to: var mos = new ManagementObjectSearcher(SELECT * FROM win32_LogonSession ); as evidently there are no sessions with a LogonType of 2 ('interactive') running on your machine. See here( http://msdn.microsoft.com/en-us/library/aa394189(VS.85).aspx ) for the types of sessions which are supported if you want to do your own filtering.

Vijay Yadav · Answer

ok!

Vulpes · Answer

Ah that's good Vijay ;) It's always nice to get some WMI code to work as the whole API is reminiscent of a vast partly-explored jungle :)

Vijay Yadav · Answer

Hi Vulpes With the help of Logontype=10 its working. It is use for both remote and interactive. Anyway thanks a lot!

Sam Hobbs · Answer

No I mean you can create one. You don't understand. I think if you just read about services you will quickly and easily find the answer.

Vijay Yadav · Answer

Hi Everyone Thanks for your reply! @Vulpes - I tried this way but it is not going in 1st foreach loop when i debug. Hence no result. @Suthish - Yes you are right. @Sam - There is in-built service but i need to create one. Sorry!!! for late reply guys.

Sam Hobbs · Answer

Isn't there a type of service that starts when a user logs in and stops when they log off?

Suthish Nair · Answer

Vijay you are into a good project nowdays :)

Vijay Yadav · Answer

Hi Vuples Thanks a lot for reply. It's working but i want the user name of the system it is giving LogonId as NT AUTHORITY\SYSTEM. I have attached file please see it!

Vulpes · Answer

There's probably an easier way but you can get the log in time (rather tortuously) using WMI as the following console app shows: using System; using System.Management; class Test { static void Main() { var mos = new ManagementObjectSearcher(SELECT * FROM win32_LogonSession ); foreach (ManagementObject mo in mos.Get()) { string logonId = mo[LogonId].ToString(); Console.WriteLine(LogonId : {0} logonId); var roq = new RelatedObjectQuery(ASSOCIATORS OF {Win32_LogonSession.LogonId=' + logonId + '} WHERE AssocClass = Win32_LoggedOnUser Role = Dependent); var mos2 = new ManagementObjectSearcher(roq); foreach(ManagementObject mo2 in mos2.Get()) { Console.WriteLine(User Name : {0} mo2[Name]); } DateTime startTime = ManagementDateTimeConverter.ToDateTime(mo[StartTime].ToString()); Console.WriteLine(Start time : {0} startTime); Console.WriteLine(); } Console.ReadKey(); } }