The IO_SESSION_STATE_XXX constants are mask bits that indicate the session events for which a driver requests notifications.
Send notifications of all session events.
Send a notification when the user session is created.
Send a notification when the user session ends.
Send a notification when the user session is connected.
Send a notification when the user session is disconnected.
Send a notification when the user logs on to the session.
Send a notification when the user logs off of the session.
Send a notification when any type of session event occurs.
To register to receive notifications of session events, a kernel-mode driver calls the IoRegisterContainerNotification routine. This routine's NotificationInformation parameter points to an IO_SESSION_STATE_NOTIFICATION structure. To specify the session events for which the driver wants to receive notifications, the driver sets this structure's EventMask member to the bitwise OR of one or more IO_SESSION_STATE_XXX constants. To receive notifications of all session events, the driver sets this member to IO_SESSION_STATE_VALID_EVENT_MASK.
Supported in Windows 7 and later versions of the Windows operating system.
Wdm.h (include Wdm.h, Ntddk.h, Ntifs.h, or Fltkernel.h)