Comments by Curtis Hagen

Curtis Hagen 28-Apr-14 2:27am View

or the subscription can be defined as

eTrigger.Subscription =@"<querylist><query id="0" path="Security"> <Select Path='Security'>*[System[Provider[@Name='Microsoft-Windows-Security-Auditing'] and(EventID=4625)]] </Select></Select>";

Curtis Hagen 28-Apr-14 2:23am View

Hi I have fixed the subscription part but now I get error when I start my code.I get error on this command ts.RootFolder.RegisterTaskDefinition("test", td, TaskCreation.CreateOrUpdate, null, null, TaskLogonType.None, null);

The error is (10,246):Subscription:<querylist><query id="0" path="Security"> <Select Path=Security>*[System[Provider[@Name=Microsoft-Windows-Security-Auditing] and(EventID=4625)]] </Select></Select>

My updated code is

static void Main(string[] args)
{

using (TaskService ts = new TaskService())
{

TaskDefinition td = ts.NewTask();
td.RegistrationInfo.Description = "Does something";

EventTrigger eTrigger = (EventTrigger)td.Triggers.Add(new EventTrigger());
// eTrigger.SetBasic("Security", "Microsoft Windows security auditing.", 4625);

eTrigger.Subscription =@"<querylist><query id="0" path="Security"> <Select Path=Security>*[System[Provider[@Name=Microsoft-Windows-Security-Auditing] and(EventID=4625)]] </Select></Select>";

eTrigger.ValueQueries.Add("Name", "Value");
eTrigger.Enabled = true;
td.Actions.Add(new ExecAction(@"C:\Windows\notepad.exe"));
eTrigger.ExecutionTimeLimit = TimeSpan.Zero;
ts.RootFolder.RegisterTaskDefinition("test", td, TaskCreation.CreateOrUpdate, null, null, TaskLogonType.None, null);

}

Curtis Hagen 27-Apr-14 5:09am View

My bad its not working and I don't have any answer.

Curtis Hagen 27-Apr-14 1:20am View

Deleted

The Solution

static void Main(string[] args)
{

using (TaskService ts = new TaskService())
{
// Create a new task definition and assign properties
TaskDefinition td = ts.NewTask();
td.RegistrationInfo.Description = "Does something";

EventTrigger eTrigger = (EventTrigger)td.Triggers.Add(new EventTrigger());
string cs = "hello";
EventLog securityLog = new EventLog("Security", System.Environment.MachineName);

eTrigger.SetBasic("Security", "Microsoft Windows security auditing.", 4625);
eTrigger.Enabled = true;
eTrigger.ExecutionTimeLimit = TimeSpan.Zero;

td.Actions.Add(new ExecAction(@"E:\Songs\123.mp3"));
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.ConsoleDisconnect });
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.RemoteConnect });
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.RemoteDisconnect });
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.SessionUnlock });
ts.RootFolder.RegisterTaskDefinition("test", td);
}
}

Curtis Hagen 27-Apr-14 1:08am View

Link for actual code
https://taskscheduler.codeplex.com/wikipage?title=Examples&referringTitle=Home

Curtis Hagen 27-Apr-14 1:08am View

Hey I just copied paste this code from the actual place where I copied the code and it started working.

td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.ConsoleDisconnect });
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.RemoteConnect });
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.RemoteDisconnect });
td.Triggers.Add(new SessionStateChangeTrigger { StateChange = TaskSessionStateChangeType.SessionUnlock });

Curtis Hagen 27-Apr-14 0:46am View

Can we make it working by eTrigger.Subscription, I guess it accepts XML as input.

Curtis Hagen 27-Apr-14 0:44am View

No Luck

Curtis Hagen 27-Apr-14 0:38am View

Ok let me. Thanks

Curtis Hagen 27-Apr-14 0:29am View

Infact I have tried to use the below but it didn't work also.

EventLog securityLog = new EventLog("Security", System.Environment.MachineName);
securityLog.Source = "Microsoft Windows security auditing.";
securityLog.Log="Security";
eTrigger.GetBasic(securityLog.Log,securityLog.Source,4625)

Curtis Hagen 27-Apr-14 0:24am View

Indeed I am

Curtis Hagen 27-Apr-14 0:11am View

This method has invalid arguments . Arguments must be passed with out keyword. What I think if I am able to give them a path to Event Log and Event Source it would do the trick. But I don't know what path to give

Comments by Curtis Hagen (Top 12 by date)