C / C++ / MFC

Supriya Tonape wrote:

any idea how can I get the username from {Win32_LogonSession.LogonId="50493851"} ?

#include <ntsecapi.h>
#pragma comment(lib, "Secur32.lib")
...

    LUID luid;
    luid.HighPart = 0;
    luid.LowPart = 50493851;
    PSECURITY_LOGON_SESSION_DATA pLogonSessionData;
    if (0 == ::LsaGetLogonSessionData(&luid, &pLogonSessionData))
    {
        // user name is pLogonSessionData->UserName

        ::LsaFreeReturnBuffer(pLogonSessionData);
    }

Mark Salsbery
Microsoft MVP - Visual C++

ManagementObjectSearcher logonsessionsearcher = new ManagementObjectSearcher("SELECT * FROM Win32_LogonSession Where LogonType = 2 OR LogonType = 10");
foreach (ManagementObject logonsession in logonsessionsearcher.Get())
{
    Console.WriteLine("LogonId: {0}", logonsession["LogonId"].ToString());
    Console.WriteLine("LogonType: {0}", logonsession["LogonType"].ToString());

    ManagementObjectSearcher associationsearcher = new ManagementObjectSearcher("Associators of {Win32_LogonSession.LogonId=" + logonsession["LogonId"].ToString() + "} Where AssocClass=Win32_LoggedOnUser Role=Dependent");
    foreach (ManagementObject association in associationsearcher.Get())
    {
        Console.WriteLine("   Name: {0}", association["Name"].ToString());
        Console.WriteLine("   Domain: {0}", association["Domain"].ToString());
    }
    Console.WriteLine("");
}

Mark Salsbery
Microsoft MVP - Visual C++

Associators of {Win32_LogonSession.LogonId=50493851} Where AssocClass=Win32_LoggedOnUser Role=Dependent

Mark Salsbery
Microsoft MVP - Visual C++

Supriya Tonape wrote:

I am getting 'Win32_LogonSession.LogonId'

Mark Salsbery
Microsoft MVP - Visual C++

hr1 = pclsObj->>Get(_bstr_t(L"Win32_LogonSession.Name"), 0, &vtProp1, 0, 0);

hr1 = <code>pclsObj1</code>->Get(_bstr_t(L"<code>Name</code>"), 0, &vtProp1, 0, 0);

Mark Salsbery
Microsoft MVP - Visual C++

int GetRemoteLoggedOnUsers()
{
HRESULT hres = WBEM_S_NO_ERROR;

    //hres =  CoInitializeSecurity(
    //    NULL, 
    //    -1,                          // COM authentication
    //    NULL,                        // Authentication services
    //    NULL,                        // Reserved
    //    RPC_C_AUTHN_LEVEL_DEFAULT,   // Default authentication 
    //    RPC_C_IMP_LEVEL_IMPERSONATE, // Default Impersonation  
    //    NULL,                        // Authentication info
    //    EOAC_NONE,                   // Additional capabilities 
    //    NULL                         // Reserved
    //    );

    //                  
    //if (FAILED(hres))
    //{
    //    cout << "Failed to initialize security. Error code = 0x" 
    //        << hex << hres << endl;
    //    CoUninitialize();
    //    return 1;                    // Program has failed.
    //}
    
    // Step 3: ---------------------------------------------------
    // Obtain the initial locator to WMI -------------------------

    IWbemLocator *pLoc = NULL;

    hres = CoCreateInstance(
        CLSID_WbemLocator,             
        0, 
        CLSCTX_INPROC_SERVER, 
        IID_IWbemLocator, (LPVOID *) &pLoc);
 
    if (FAILED(hres))
    {
        cout << "Failed to create IWbemLocator object."
            << " Err code = 0x"
            << hex << hres << endl;
        CoUninitialize();
        return 1;                 // Program has failed.
    }

    // Step 4: -----------------------------------------------------
    // Connect to WMI through the IWbemLocator::ConnectServer method

    IWbemServices *pSvc = NULL;
	
    // Connect to the root\cimv2 namespace with
    // the current user and obtain pointer pSvc
    // to make IWbemServices calls.
    hres = pLoc->ConnectServer(
         _bstr_t(L"ROOT\\CIMV2"), // Object path of WMI namespace
         NULL,                    // User name. NULL = current user
         NULL,                    // User password. NULL = current
         0,                       // Locale. NULL indicates current
         NULL,                    // Security flags.
         0,                       // Authority (e.g. Kerberos)
         0,                       // Context object 
         &pSvc                    // pointer to IWbemServices proxy
         );
    
    if (FAILED(hres))
    {
        cout << "Could not connect. Error code = 0x" 
             << hex << hres << endl;
        pLoc->Release();     
        CoUninitialize();
        return 1;                // Program has failed.
    }

    cout << "Connected to ROOT\\CIMV2 WMI namespace" << endl;


    // Step 5: --------------------------------------------------
    // Set security levels on the proxy -------------------------

    hres = CoSetProxyBlanket(
       pSvc,                        // Indicates the proxy to set
       RPC_C_AUTHN_WINNT,           // RPC_C_AUTHN_xxx
       RPC_C_AUTHZ_NONE,            // RPC_C_AUTHZ_xxx
       NULL,                        // Server principal name 
       RPC_C_AUTHN_LEVEL_CALL,      // RPC_C_AUTHN_LEVEL_xxx 
       RPC_C_IMP_LEVEL_IMPERSONATE, // RPC_C_IMP_LEVEL_xxx
       NULL,                        // client identity
       EOAC_NONE                    // proxy capabilities 
    );

    if (FAILED(hres))
    {
        cout << "Could not set proxy blanket. Error code = 0x" 
            << hex << hres << endl;
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return 1;               // Program has failed.
    }


IEnumWbemClassObject* pEnumerator = NULL;
hres = pSvc->ExecQuery(
bstr_t("WQL"),
bstr_t("SELECT * FROM Win32_LogonSession WHERE LogonType = 2 OR LogonType = 10"),
WBEM_FLAG_FORWARD_ONLY | WBEM_FLAG_RETURN_IMMEDIATELY,
NULL,
&pEnumerator);

if (FAILED(hres))
{
pSvc->Release();
return WBEM_S_FALSE; // Program has failed.
}

IWbemClassObject *pclsObj;
ULONG uReturn = 0;

while (pEnumerator)
{
HRESULT hr = pEnumerator->Next(WBEM_INFINITE, 1, &pclsObj, &uReturn);

if(0 == uReturn)
{
//ErrorInfo(hres,11);
break;
}

VARIANT vtProp;
VariantClear(&vtProp);

// Get the value of the Name property
hr = pclsObj->Get(_bstr_t(L"LogonId"), 0, &vtProp, 0, 0);
printf("Logon ID : %s",vtProp.bstrVal);

wstring wstrQuery = L"Associators of {Win32_LogonSession.LogonId=";
wstrQuery += vtProp.bstrVal;
wstrQuery += L"} Where AssocClass=Win32_LoggedOnUser Role=Dependent";

IEnumWbemClassObject* pEnumerator1 = NULL;
hres = pSvc->ExecQuery(
bstr_t("WQL"),
bstr_t(wstrQuery.c_str()),
WBEM_FLAG_FORWARD_ONLY | WBEM_FLAG_RETURN_IMMEDIATELY,
NULL,
&pEnumerator1);

IWbemClassObject *pclsObj1;
ULONG uReturn1 = 0;

HRESULT hr1 = pEnumerator1->Next(WBEM_INFINITE, 1, &pclsObj1, &uReturn1);
if(0 == uReturn1)
{
//ErrorInfo(hres,11);
break;
}

VARIANT vtProp1;
hr1 = pclsObj1->Get(_bstr_t(L"Name"), 0, &vtProp1, 0, 0);
printf("User Name : %s",vtProp1.bstrVal);
}

return 0;
}

Mark Salsbery
Microsoft MVP - Visual C++

Supriya Tonape wrote:

U have gr8 weekend ahead!

Mark Salsbery
Microsoft MVP - Visual C++

Supriya Tonape wrote:

but it;s returning me all users those are Disc earlier..

Mark Salsbery
Microsoft MVP - Visual C++