Re: startup programs load notification;

use a service and register to be notified of session changes, these types of notifications do not exist in kernel mode

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.


"krish" <pradeep_bisht@xxxxxxxxx> wrote in message news:222134e9-3bb6-4106-bf54-a111b944147a@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
When the machine boots up followed by when the user logs in. I want to
get the information about all the processes/services/files that are
opened etc during the bootup time. Then the user logs in and some user
profile specific programs are loaded - I want to get the information
about these programs as well.

On Jun 9, 1:20 pm, "Doron Holan [MSFT]" <dor...@xxxxxxxxxxxxxxxxxxxx>
wrote:
why? in what context? for each user? when the machine boots? when a user
logs in ? what are you going to do with that state information?

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.

"krish" <pradeep_bi...@xxxxxxxxx> wrote in message

news:fa78b992-d9b9-445e-aa37-24b14345d67d@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

> Is there any event notification kind of thing which I can register in
> my kernel mode driver which will notify me when all the startup
> programs (drivers, services, user application programs etc) have been
> loaded?

> Or alternatively is there a way of determining all the programs
> (drivers, services, user application programs etc) loaded during the
> windows startup time?

> Thanks.


.

Relevant Pages

  • Re: WM_DEVICECHANGE PARAMETERS
    ... of course you can register for multiple notifications. ... for keyboards you should GUID_DEVINTERFACE_KEYBOARD, ... Please do not send e-mail directly to this alias. ... Can I register multiple times for this? ...
    (microsoft.public.development.device.drivers)
  • Re: WinUSB: How to tell if the device has gone
    ... register for pnp handle notifications on the HANDLE that you opened with RegisterDeviceNotification. ... you will be told when the usb device has been unplugged ... Please do not send e-mail directly to this alias. ...
    (microsoft.public.windowsxp.device_driver.dev)
  • Re: Surprise removal of keyboard device waking from S3
    ... RegisterDeviceNotification is also used to tell your app when the raw PDO appears as well by registering for device itnerface notifications. ... if you open a handle to a pnp device, you should also register for pnp notifications on that handle to know when the underlying device is going away. ... as to why the usb keyboard is dropping off the bus, it could be a variety of problems, but in the end it does not matter. ...
    (microsoft.public.development.device.drivers)
  • Re: IoReportTargetDeviceChangeAsynchronous returns STATUS_PENDING
    ... Please do not send e-mail directly to this alias. ... This posting is provided "AS IS" with no warranties, ... >> registered for device arrival notifications on the GUID, ... >> newsgroup purposes only. ...
    (microsoft.public.development.device.drivers)
  • Re: IoReportTargetDeviceChangeAsynchronous returns STATUS_PENDING
    ... Please do not send e-mail directly to this alias. ... >I am now getting notifications on WM_DEVICECHANGE (I'm not sure what ... > making it over to the app in their respective DEV_BROADCAST_HANDLE fields. ... > I've defined the TARGET_DEVICE_CUSTOM_NOTIFICATION buffer as a local (on ...
    (microsoft.public.development.device.drivers)
Loading