Wise Installation 9: Problem Killing Processes

Posted on 2006-11-09
Last Modified: 2013-11-13
In their infinate wisdom, M$ has deemed that some processes are only allowed to be killed by users if
they were not started by the SYSTEM account.

We have several processes that may be started by SQLSERVERAGENT service and they are started
using the SYSTEM account and we need to kill them in order to install new versions. Let me say that
we have tried the Replace In-Use Files option and it doesn't work because we also want rollback
capabilities; we attempt to rename the directory that these utilites are in so we may rollback in case
of errors.

Now, the rename isn't happening because of the in-use file(s) and we need to kill these processes if
they are running but none of the Kill Process scripts from the script library work. I have stepped
throught them and found that the error returned when trying to open the process to get the
process handle is "Access denied".

BTW, I am able to kill it using Task Manager because TM runs in the SYSTEM account.

Any thoughts on a solution or how to impersonate the SYSTEM account to kill these processes?
Question by:EddieShipman
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4

Expert Comment

ID: 17907912
Hi EddieShipman,

pskill from
Or, if you need more flexibility, psexec from the same location.

LVL 26

Author Comment

ID: 17908177
Already tried that, does not work.
Seems I have to AdjustTokenPrivileges and enable the SeDebugPrivilege
in order to do this. Know how to do that in Wise script?

Expert Comment

ID: 17908845
If Task Manager is capable of killing the process, then psexec -s pskill process should also be capable of doing so, as the -s option of psexec causes it to run with system privileges.  Are you receiving an error message?  If so, could you post it here?

If accomplishing this from within WISE is the ultimate goal, you might benefit from posting a pointer to this question in the Applications forum.  And maybe the appropriate Windows OS forum as well.
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

LVL 26

Author Comment

ID: 17910093
psexec -s pskill myprocessname won't run at all.
Both psexec and pskill are loaded into memory but it ain't running.

I don't think pskill is "accepting" the commandline option there.

If you can show me how to make it work, that would be great...
LVL 26

Author Comment

ID: 17910117
If I try to run it here is the ouptput:

C:\>psexec -s c:\pskill.exe EditPad.exe

PsExec v1.72 - Execute processes remotely
Copyright (C) 2001-2006 Mark Russinovich
Sysinternals -

PsKill v1.11 - Terminates processes on local or remote systems
Copyright (C) 1999-2005  Mark Russinovich
Sysinternals -

and it just hangs...I have to kill both processes in TM.
OH, BTW, you must supply the path to pskill, too.

Expert Comment

ID: 17911579
I see what you mean...  Having to supply the path is a known issue -- apparently the search path as defined in the PATH environment variable isn't checked by psexec when running as system.  However, I find it bizarre that pskill doesn't run correctly under psexec -s ...  I tried psexec -s cmd.exe, and it started the command prompt just fine in interactive mode.  However, pskill won't run correctly like that, either.  It just hangs, as you described.  I traced the progress of the file in ProcMon, and there's nothing to indicate that it did anything illegal...  It just seems to stop executing.

I suppose the alternative is to write a program that will generate a security token with the appropriate privileges and terminate the process...  I'll look into it and see if it can be done easily.  Hopefully I'll have some code to post for you tomorrow.
LVL 26

Author Comment

ID: 17914486
No need, I have Delphi code to do that already. I just need to get the
authorization to include this in our installs. It seems that mgmnt doesn't
want to include things like this because we formerly had an "InstallHelper"
DLL that did a lot of work that we now do in the Wise script and they
wanted all that type of stuff (extra files) removed.

My thought is that there were some other things that tooks us weeks to
figure out, in Wise, that we could have done in a few minutes with another
programming language, like Delphi (our main dev environment), yet we
have not been able to use this. We know we can also do this in Wise, but
don't know how to do the API calls in wise script.

The new version of Wise, which is still in beta, allows you to use VBS to do
a lot of things and that would help a lot but we are not going to build our
installs with a beta product, either.


Expert Comment

ID: 17930371
Ah, now I understand your problem a bit better.  In that case, I'm afraid I can't help.  )c:
LVL 26

Author Comment

ID: 17930902
We have written a DLL that will kill the processes in question.

Thanks for helping.

Accepted Solution

DarthMod earned 0 total points
ID: 18076863
PAQd, 500 points refunded.

CS Moderator

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Computer science students often experience many of the same frustrations when going through their engineering courses. This article presents seven tips I found useful when completing a bachelors and masters degree in computing which I believe may he…
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
An introduction to basic programming syntax in Java by creating a simple program. Viewers can follow the tutorial as they create their first class in Java. Definitions and explanations about each element are given to help prepare viewers for future …
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question