std::vector<LogonSessionData> sessions;

LUID* luid;

ULONG count;

if (!NT_SUCCESS(::LsaEnumerateLogonSessions(&count, &luid)))

return sessions;

sessions.reserve(count);

for (ULONG i = 0; i < count; i++) {

SECURITY_LOGON_SESSION_DATA* data;

if (NT_SUCCESS(::LsaGetLogonSessionData(luid + i, &data))) {

LogonSessionData sd;

sd.Index = i + 1;

sd.LogonId = data->LogonId;

LsaStringToWstring(data->AuthenticationPackage, sd.AuthenticationPackage);

LsaStringToWstring(data->DnsDomainName, sd.DnsDomainName);

LsaStringToWstring(data->HomeDirectory, sd.HomeDirectory);

LsaStringToWstring(data->HomeDirectoryDrive, sd.HomeDirectoryDrive);

LsaStringToWstring(data->LogonDomain, sd.LogonDomain);

LsaStringToWstring(data->LogonScript, sd.LogonScript);

LsaStringToWstring(data->LogonServer, sd.LogonServer);

LsaStringToWstring(data->UserName, sd.UserName);

LsaStringToWstring(data->Upn, sd.Upn);

LsaStringToWstring(data->ProfilePath, sd.ProfilePath);

sd.LogoffTime = data->LogoffTime;

sd.LogonTime = data->LogonTime;

sd.LastFailedLogon = data->LastLogonInfo.LastFailedLogon;

sd.LastSuccessfulLogon = data->LastLogonInfo.LastSuccessfulLogon;

sd.FailedAttemptCountSinceLastSuccessfulLogon = data->LastLogonInfo.FailedAttemptCountSinceLastSuccessfulLogon;

sd.KickOffTime = data->KickOffTime;

sd.UserFlags = data->UserFlags;

sd.LogonType = (SecurityLogonType)data->LogonType;

if (data->Sid)

::CopySid(_countof(sd.Sid), (PSID)sd.Sid, data->Sid);

else

::memset(sd.Sid, 0, sizeof(sd.Sid));

sd.Session = data->Session;

sd.PasswordCanChange = data->PasswordCanChange;

sd.PasswordLastSet = data->PasswordLastSet;

sd.PasswordMustChange = data->PasswordMustChange;

sessions.emplace_back(std::move(sd));

::LsaFreeReturnBuffer(data);

}

}

::LsaFreeReturnBuffer(luid);

return sessions;

SECURITY_LOGON_SESSION_DATA* data;

if (0 == ::LsaGetLogonSessionData(sessionId, &data)) {

std::wstring username(data->UserName.Buffer, data->UserName.Length / sizeof(WCHAR));

LsaFreeReturnBuffer(data);

return username;

}

return L"";

LSA_HANDLE hPolicy = nullptr;

LSA_OBJECT_ATTRIBUTES oa = { sizeof(oa) };

auto status = ::LsaOpenPolicy(nullptr, &oa, lsaAccess, &hPolicy);

::SetLastError(::RtlNtStatusToDosError(status));

return hPolicy;

}