Pages

Wednesday, December 21, 2011

PsTools Windows

Introduction

The Windows NT and Windows 2000 Resource Kits come with a number of command-line tools that help you administer your Windows NT/2K systems. Over time, I've grown a collection of similar tools, including some not included in the Resource Kits. What sets these tools apart is that they all allow you to manage remote systems as well as the local one. The first tool in the suite was PsList, a tool that lets you view detailed information about processes, and the suite is continually growing. The "Ps" prefix in PsList relates to the fact that the standard UNIX process listing command-line tool is named "ps", so I've adopted this prefix for all the tools in order to tie them together into a suite of tools named PsTools.


https://technet.microsoft.com/en-us/sysinternals/pstools.aspx


  • PsExec                   - execute processes remotely
  • PsFile                    - shows files opened remotely
  • PsGetSid               - display the SID of a computer or a user
  • PsInfo                   - list information about a system
  • PsKill                   - kill processes by name or process ID
  • PsList                   - list detailed information about processes
  • PsLoggedOn       - see who's logged on locally and via resource sharing
  • PsLogList            - dump event log records
  • PsPasswd            - changes account passwords
  • PsService            - view and control services
  • PsShutdown        - shuts down and optionally reboots a computer
  • PsSuspend          - suspends processes
  • PsUptime            - shows you how long a system has been running since its last reboot (PsUptime's functionality has been incorporated into PsInfo)


 in that tools manly i mention below about psexe.exe that is one of application in PsTools

......................................................................................................................................................
psexe.exe

Execute processes on a remote system and redirect output to the local system

 Examples
This article I wrote describes how PsExec works and gives tips on how to use it:

This command executes IpConfig on the remote system with the /all switch, and displays the resulting output locally:
psexec \\ipaddress  ipconfig /all
This command copies the program test.exe to the remote system and executes it interactively:
psexec \\ipaddress -c test.exe
Specify the full path to a program that is already installed on a remote system if its not on the system's path:
psexec \\ipaddress c:\bin\test.exe
Run Regedit interactively in the System account to view the contents of the SAM and SECURITY keys::
psexec -i -d -s c:\windows\regedit.exe
To run Internet Explorer as with limited-user privileges use this command:
psexec -l -d "c:\program files\internet explorer\iexplore.exe"


No comments:

Post a Comment