locked
SMB User SID in WFP RRS feed

  • Question

  • Hi,

    I am looking for a way to retrieve the SID \ User Name of the user who logged in via SMB.
    I would like to do that in my WFP driver.
    One way is of course, parsing the SMB login message, but I am looking for another way.
    Is there a way to retrieve this information from Windows (after windows has handled the SMB message, and without me having to parse the SMB message myself)?

    Thanks,

    Eitan.

    Monday, December 5, 2016 9:17 AM