When I click the logoff button in Windows 2000 or XP or 2003 does anyone know what process/executable/registry key/API or function gets called so that Windows performs the log off?
Here's my problem.... We have a desktop management app that is continuously running a process called SLAGENT.EXE on the client machine. When the user clicks the logoff button, SLAGENT somehow is able to intercept the logoff process, run various logoff scripts, then return control back to windows to finish logging off. We have just implemented a Single Sign-On application in our facility that has its own logoff button on a launchpad. If a user clicks that button they execute SHUTDOWN.EXE -L which comes from the windows 2000/2003 resource kit. The problem with that is that my logoff scripting is somehow bypassed. Apparently SLAGENT doesn't "see" that windows is logging off and never intercepts the process to do its thing. What I need to know is what process gets called by clicking the windows logoff button?
I have been searching for this for days and apparently this is the best kept secret in the world. I'm so frustrated. I feel like I would be easier to break into fort knox than find out this stupid process. PLEASE PLEASE PLEASE anyone who can, I would appreciate your assistance.