SeRegisterLogonSessionTerminatedRoutine function (ntifs.h)
The SeRegisterLogonSessionTerminatedRoutine routine registers a callback routine to be called when a logon session terminates. A logon session terminates when the last token referencing the logon session is deleted.
Syntax
NTSTATUS SeRegisterLogonSessionTerminatedRoutine(
[in] PSE_LOGON_SESSION_TERMINATED_ROUTINE CallbackRoutine
);
Parameters
[in] CallbackRoutine
Address of routine to call when a logon session terminates.
Return value
SeRegisterLogonSessionTerminatedRoutine can return one of the following:
Return code | Description |
---|---|
|
The callback routine was successfully registered. |
|
The value of CallbackRoutine is NULL. |
|
A list entry could not be allocated for the callback routine. |
Remarks
Each call to SeRegisterLogonSessionTerminatedRoutine must be matched by a subsequent call to SeUnregisterLogonSessionTerminatedRoutine.
For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.
Requirements
Requirement | Value |
---|---|
Target Platform | Universal |
Header | ntifs.h (include Ntifs.h) |
Library | NtosKrnl.lib |
DLL | NtosKrnl.exe |
IRQL | PASSIVE_LEVEL |