Get Process Owner
Sometimes it is necessary to know the account from which a process is running. You may need to kill a process if it is running as a local account or as an end user, but don't know who the process is running as.
This script will give you a list of processes and who their owner is.
For instance, running rslist.exe "Computer Name" (or "." for local) gives you a list of all processes on the computer and their owner.
You can also narrow the process list by typing in the process name you are looking for or even a partial process name.
Running rslist.exe "Computer Name" aexau gives you a list of processes that begin with aexau:
Finally, you can also search by process id (or PID): rslist.exe "Computer Name" PID will return any processes running with that ID:
Comments
Did you create this?
TheSmiz,
What is the source of this executable? Did you create it? I'm sure you can see how some people might be a bit suspect of downloading and running a random .exe file, regardless of whether it came from a Symantec server (where I assume it has been thoroughly scanned and profiled upon upload ;) ).
Thanks,
Kyle
Symantec Trusted Advisor
For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
The source is simply a
The source is simply a compiled vbscript I wrote. Drop the .exe into notepad, scroll to the bottom and you can see the script.
Interesting, I wouldn't think twice about downloading and running something posted on connect (granted it was something I wanted to use) especially knowing the upload process and (knowing or looking looking at) the history of the uploader.
Some applications (PrimalScript, VbsEdit) will compile scripts into .exe's that can run in console mode since some people would rather run rslist.exe than cscript.exe rslist.vbs/vbe.
RS
Tasklist & Taskkill
Tasklist
Taskkill
Sure... You could also use
Sure...
You could also use pslist and pskill (from sysinternals, no M$) for the purpose of what you posted above. However, which of these options give you the owner name of the process?
The purpose of this is not another task list app/script and reading the description would have informed of such.
The purpose is to give a simple process list (notice how no information about CPU time, memory or any of that was included) giving the pid, process name and owner name (owner = id that launched the process).
Thanks
Would you like to reply?
Login or Register to post your comment.