c# - 使用 wmi 获取事件 session (Win32_LogonSession 也返回非事件/旧 session )

Question

有没有办法只显示 wmi 的事件 session ？问题是 Win32_LogonSession 还显示非事件/断开连接的 session 。

ManagementScope scope = new ManagementScope(ManagementPath.DefaultPath);
SelectQuery query = new SelectQuery("Win32_LogonSession");
ManagementObjectSearcher searcher = new ManagementObjectSearcher(scope, query);
ManagementObjectCollection results = searcher.Get();
foreach (ManagementObject mo in results)
{
    PrintWmiObject(mo);
}

它的输出是这样的

AuthenticationPackage - Kerberos

Caption -

Description -

InstallDate -

LogonId - 10179411

LogonType - 10

Name -

StartTime - 20110617083244.547220+120

Status -

Answer 1

关于:

SelectQuery query = new SelectQuery("Select * from Win32_LogonSession Where LogonType = 10")