RE: Finding user that caused FileSystemWatcher event in Windows Servic

Hi

It seems to me that the developers of .NET overlooked this important
component of the FileSystemWatcher component control. I have tried to
retrieve this info as well without any luck. May be we need to recomment the
presence of this feature in .NET, and my the developers of .NET look into
that, because its no use to receive an event that a file is being deleted
while you cant determine who is/has deleted the file.

Joel

"CEP921" wrote:

> Hi All,
>
> I'm working on a Windows Service that uses FileSystemWatcher components
> to capture and log data when certain actions (such as files being
> deleted) take place in the file system. I am trying to figure out how
> to obtain the WindowsIdentity (User Name, Login, etc.) of the actual
> user that performed the action (for example, DOMAINNAME\CPoplawski
> deleted a file). Simply retrieving the WindowsIdentity within the
> service does not work, as it returns SYSTEM because the service runs
> under the Local System account. Is there any way, maybe similar to
> Impersonation in ASP.Net, to accomplish this?
>
>
> Regards,
>
>
> Chad Poplawski
>
>
>

=?Utf-8?B?Sm9lbA==?=

Is this information available in the Secuurity logs? You might need to
enable the auditing of the file system to have the DELETE records appear
"Joel" <> wrote in message
news:873F5E98-10D2-4FC3-BF60-...
> Hi
>
> It seems to me that the developers of .NET overlooked this important
> component of the FileSystemWatcher component control. I have tried to
> retrieve this info as well without any luck. May be we need to recomment
> the
> presence of this feature in .NET, and my the developers of .NET look into
> that, because its no use to receive an event that a file is being deleted
> while you cant determine who is/has deleted the file.
>
> Joel
>
> "CEP921" wrote:
>
>> Hi All,
>>
>> I'm working on a Windows Service that uses FileSystemWatcher components
>> to capture and log data when certain actions (such as files being
>> deleted) take place in the file system. I am trying to figure out how
>> to obtain the WindowsIdentity (User Name, Login, etc.) of the actual
>> user that performed the action (for example, DOMAINNAME\CPoplawski
>> deleted a file). Simply retrieving the WindowsIdentity within the
>> service does not work, as it returns SYSTEM because the service runs
>> under the Local System account. Is there any way, maybe similar to
>> Impersonation in ASP.Net, to accomplish this?
>>
>>
>> Regards,
>>
>>
>> Chad Poplawski
>>
>>
>>

Bob