window service: How to get timestamp when user logged in into the system

Vijay Yadav

Hi all,

I want to write a window service that send the email as soon as the user will logged in into the system(Computer).

I want to know the user and the time i.e. at what time he/she logs in.

With the help of system.security,principal i get the current user but how to get the loggin time.

Pease help!

11 Replies

Know the answer? Post it — somebody with the same question will find it here.

Vulpes15y ago
Accepted answer
I've changed the program a bit in an attempt to filter out the info you want:

using System;
using System.Management;

class Test
{
static void Main()
{
var mos = new ManagementObjectSearcher("SELECT * FROM win32_LogonSession WHERE LogonType = 2");

foreach (ManagementObject mo in mos.Get())
{
string logonId = mo["LogonId"].ToString();
uint logonType = (uint)mo["LogonType"];

var roq = new RelatedObjectQuery("ASSOCIATORS OF {Win32_LogonSession.LogonId='" + logonId +
"'} WHERE AssocClass = Win32_LoggedOnUser Role = Dependent");
var mos2 = new ManagementObjectSearcher(roq);

foreach(ManagementObject mo2 in mos2.Get())
{
bool isLocal = (bool)mo2["LocalAccount"];
if (isLocal)
{
Console.WriteLine("LogonId : {0}", logonId);
Console.WriteLine("LogonType : {0}", logonType);
Console.WriteLine("User Name : {0}", mo2["Name"]);
DateTime startTime = ManagementDateTimeConverter.ToDateTime(mo["StartTime"].ToString());
Console.WriteLine("Start time : {0}", startTime);
Console.WriteLine();
}
}
}

Console.ReadKey();
}
}
Vijay Yadav15y ago
ok!
Vulpes15y ago
Ah, that's good, Vijay ;)

It's always nice to get some WMI code to work as the whole API is reminiscent of a vast partly-explored jungle :)
Vijay Yadav15y ago
Hi Vulpes,

With the help of Logontype=10, its working.

It is use for both remote and interactive.

Anyway thanks a lot!
Vulpes15y ago
If it's not now going into the first foreach() loop, then change the first line back to:

var mos = new ManagementObjectSearcher("SELECT * FROM win32_LogonSession ");

as evidently there are no sessions with a LogonType of 2 ('interactive') running on your machine.

See here(http://msdn.microsoft.com/en-us/library/aa394189(VS.85).aspx) for the types of sessions which are supported if you want to do your own filtering.
Sam Hobbs15y ago
No, I mean you can create one. You don't understand. I think if you just read about services you will quickly and easily find the answer.
Vijay Yadav15y ago
Hi Everyone,

Thanks for your reply!

@Vulpes - I tried this way but it is not going in 1st foreach loop when i debug. Hence no result.

@Suthish - Yes, you are right.

@Sam - There is in-built service but i need to create one.

Sorry!!! for late reply guys.
Sam Hobbs15y ago
Isn't there a type of service that starts when a user logs in and stops when they log off?
Suthish Nair15y ago
Vijay, you are into a good project nowdays :)
Vijay Yadav15y ago
Hi Vuples, Thanks a lot for reply.
It's working but i want the user name of the system, it is giving LogonId as "NT AUTHORITY\SYSTEM". I have attached file please see it!
Vulpes15y ago
There's probably an easier way but you can get the log in time (rather tortuously) using WMI as the following console app shows:

using System;
using System.Management;

class Test
{
static void Main()
{
var mos = new ManagementObjectSearcher("SELECT * FROM win32_LogonSession ");

foreach (ManagementObject mo in mos.Get())
{
string logonId = mo["LogonId"].ToString();
Console.WriteLine("LogonId : {0}", logonId);
var roq = new RelatedObjectQuery("ASSOCIATORS OF {Win32_LogonSession.LogonId='" + logonId +
"'} WHERE AssocClass = Win32_LoggedOnUser Role = Dependent");
var mos2 = new ManagementObjectSearcher(roq);

foreach(ManagementObject mo2 in mos2.Get())
{
Console.WriteLine("User Name : {0}", mo2["Name"]);
}

DateTime startTime = ManagementDateTimeConverter.ToDateTime(mo["StartTime"].ToString());
Console.WriteLine("Start time : {0}", startTime);
Console.WriteLine();
}

Console.ReadKey();
}
}