re: Expert Solution for 2011 Scripting Games Advanced Event 4: Use PowerShell to Find Services Hiding in the SvcHost Process

cseiter — Thu, 21 Apr 2011 14:05:25 GMT

Trying to ask a question or two on all I submit, or write and fail to look at a calendar. I was proud of this one I wrote but didn't turn it in on time. I had it look at all the svchosts running and pulled the ProcessIDs. Then I went through all the services running and got the ones whose pathname contained svchost.exe and sorted/grouped by ProcessId on those. This was the only way I could think of to get the services running under the svchost process. I was getting hung up on the fact that on my machine that does not have admin rights running the query to get the commandline path for a service was null. Permissions issue; fine. My down and dirty way to check for permissions was to see if the commandline path value was being returned null. If it was, not a local admin. What's the proper way to check for local admin rights on things like this?

re: Expert Solution for 2011 Scripting Games Advanced Event 4: Use PowerShell to Find Services Hiding in the SvcHost Process

Klaus Schulte — Thu, 21 Apr 2011 12:19:56 GMT

A very good, short and precise solution that can be well understood!

Bur ... my famous last words: There is no error handling at all!

kind regards,

Klaus (Schulte)