Can we create an Event(CreateEvent) in windows for both system session and user session using c++

Question

If we create a event using CreateEvent in windows in system session, we cannot able to open that event in USER session using OpenEvent.

Is there any way of creating a global event so that both the user and system can open it and close (CloseHandle) anywhere.

Example:
I'm creating a event in system session(Service) but then I'm impersonating to User so after impersonation I cant able to close the event handle, because the both sessions are different.

Answer 1

Windows services create events in the global namespace as @David Lowndes pointed out. However, in order for a process running in a standard user's interactive session to open a named event created by a service in the global namespace using the "Global\" prefix the event must have a security descriptor that grants access to the user account or one of the groups to which the user account belongs.

Example code at Modifying the ACLs of an Object in C++ shows how to accomplish this by modifying the security descriptor for an object after it is created. Of course you would need to provide the specifics for an event object when adapting the example code.