Concept Code - Active Directory Monitor using WMI and WQL Event Query - in C#

Hello,

I require Concept code, as a Windows Service, that will allow administrators to monitor events audited within Active Directory using WMI and WQL Event Query.

I require:

- C# DLL that contains the logic to bind with Active Directory and then capture the configured events

- Sample Windows Service, written in C#, that will, when the service is started, record the events into a text, csv based log file

Events it needs to capture are:

- When a user's password changes - but not the password itself.

- When a user account is successfully logged on

- When a user account logon is denied and possible the reason why - logon times, password incorrect, user account doesn't exist etc

- When a user logs off, if possible.

All the above along with the datetime, domain name, domain controlled the action was carried out on and who did the event.

Needs to work with Windows 2003 R2, 2008 and 2008 R2 Servers - both 32 and 64 bit.

Thanks,

Rob

C# Programming Software Architecture

Project ID: #3265586

About the project