Creating a Winlogon Notification Package

最新推荐文章于 2012-08-27 15:47:18 发布

原创最新推荐文章于 2012-08-27 15:47:18 发布 · 1.6k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#prototype #function #structure #dll #each #events

本文介绍了创建Winlogon通知包的相关内容。Winlogon通知包是导出处理Winlogon事件函数的DLL，事件处理函数名由开发者决定，Winlogon通过注册表获取。不必为每个事件实现和注册处理函数，函数需使用特定原型。使用时要将DLL复制到指定文件夹并更新注册表。

Creating a Winlogon Notification Package

A Winlogon notification package is a DLL that exports functions that handle Winlogon events. For example, when a user logs onto the system, Winlogon calls each notification package's logon event handler function to provide information about the event.

The names of the event handler functions implemented in a notification package are left up to the developer; Winlogon checks the registry to obtain the names of the event handler functions. For example, one notification package might implement the logon event handler function as WLEventLogon whereas another might use HandleLogonEvent.

You do not have to implement and register event handlers for every Winlogon event, only for events that are useful to your application. Each event handler function must use the function prototype described in Event Handler Function Prototype. This prototype has a single parameter: a WLX_NOTIFICATION_INFO structure that contains details about the event.

Winlogon ignores the output of event handler functions. If handling an event requires interacting with Winlogon, use the Winlogon Support Functions.

To use your Winlogon notification package, the DLL must be copied to the %SystemRoot%/system32 folder, and a registry update must be made for the notification package. For information about the registry update, see Registering a Winlogon Notification Package.