Solved

Need VBScript to monitor a 64 bit process and take action when the process closes

Posted on 2009-06-30
2
1,417 Views
Last Modified: 2013-11-29
I have been using a VBScript to launch a special 32 bit application, then monitor it's process to see when it closes, then log the user off automatically.  But now I need to modify this to run on W2K3 x64 (and the process is also 64 bit now).  Can someone help me modify the below portion of a script so that it would work on W2K3 x64, and when MyProgram.EXE is also 64 bit?

(This was the VBScript for 32 bit version of the program)

'Connect to wmi

'set objWMIService = GetObject("winmgmts:root\cimv2")

Do

 found = false

'List the processes

strQuery = "Select * from win32_process where name='MyProgram.EXE'"

set colProcesses = objWMIService.ExecQuery(strQuery)

 

for each proc in colProcesses

 

   ' Get the reference class linking processes to sessions to get the session object path

   strQuery = "References of {win32_process.handle='" & proc.handle & "'} where ResultClass=Win32_SessionProcess"

   set colSessionReferences = objWMIService.ExecQuery(strQuery)

 

   for each oSessionReference in colSessionReferences

      'Get associators of the session object that are user accounts (linked by win32_loggedonuser)

      strQuery = "Associators of {" & oSessionReference.antecedent & "} where AssocClass=win32_LoggedOnUser"

      set colUsers = objWMIService.ExecQuery(strQuery,,48)

         for each user in colUsers

         if user.name = MUser then found = true

      next

   next

next

Loop While found = true

 

'Run the Windows 2003 logoff utility

wshShell.Run "c:\windows\system32\shutdown.exe -l -f"

Open in new window

0
Comment
Question by:Herrmannator
2 Comments
 
LVL 4

Accepted Solution

by:
asrdias earned 500 total points
Comment Utility
The script should be fine... it works in my x64 Win7...

You must check if your wscript or cscript are running in 32bit or 64bit. Use task manager to check those processes. If there is a *32 in front of them then you're on 32 bit.
The 32 bit versions are stored in C:\Windows\SysWOW64 and the 64 bit ones should be on System32

0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now