[ duja23 @ 23.09.2005. 08:26 ] @
Postoji 7 racunara u LAN-u. Zeleo bih da nadgledam samo koji procesi se na kom racunaru izvrsavaju (dakle, bez remote administracije ili slicnog). Koje privilegije trebaju ti racunari da podese da bih mogao to da radim, kao i preko kog programa ako nije moguce iz windowsa direktno?

P.S. Na svim racunarima je XP Professional.
[ jogurt @ 23.09.2005. 09:18 ] @
Jedna od elegantnih opcija je svakako SNMP. Na svi racunarima doinstaliraj SNMP agente. U Windowsu ga podizes kao servis. Zatim, podesi u servisu read-only community string (recimo public) i sa svoje masine nekim snmp tool-om propituj svih sedam masina na odgovarajucim OID-ma i sa stringom public. U pocetku ces uraditi jedan veliki snmpwalk dok ne utvrdis gde tacno Windows cuva info o running procesima, a potom ces propitivati samo tebi interesantne OID-e.

Na primer jedno propitivanje tekucih procesa na necijoj masini (doduse iz linux konzole) moze da izgleda ovako:

Code:

HOST-RESOURCES-MIB::hrSWRunName.1 "System Idle Process"
HOST-RESOURCES-MIB::hrSWRunName.4 "System"
HOST-RESOURCES-MIB::hrSWRunName.140 "soffice.BIN"
HOST-RESOURCES-MIB::hrSWRunName.156 "navapsvc.exe"
HOST-RESOURCES-MIB::hrSWRunName.488 "Explorer.EXE"
HOST-RESOURCES-MIB::hrSWRunName.580 "SAVScan.exe"
HOST-RESOURCES-MIB::hrSWRunName.592 "SMSS.EXE"
HOST-RESOURCES-MIB::hrSWRunName.628 "SynTPLpr.exe"
HOST-RESOURCES-MIB::hrSWRunName.640 "SynTPEnh.exe"
HOST-RESOURCES-MIB::hrSWRunName.652 "PDVDServ.exe"
HOST-RESOURCES-MIB::hrSWRunName.664 "CSRSS.EXE"
HOST-RESOURCES-MIB::hrSWRunName.688 "WINLOGON.EXE"
HOST-RESOURCES-MIB::hrSWRunName.732 "SERVICES.EXE"
HOST-RESOURCES-MIB::hrSWRunName.744 "LSASS.EXE"
HOST-RESOURCES-MIB::hrSWRunName.816 "rundll32.exe"
HOST-RESOURCES-MIB::hrSWRunName.912 "SVCHOST.EXE"
HOST-RESOURCES-MIB::hrSWRunName.936 "sysocmgr.exe"
HOST-RESOURCES-MIB::hrSWRunName.1012 "QtZgAcer.EXE"
HOST-RESOURCES-MIB::hrSWRunName.1016 "SVCHOST.EXE"
HOST-RESOURCES-MIB::hrSWRunName.1056 "anbmServ.exe"
HOST-RESOURCES-MIB::hrSWRunName.1116 "SVCHOST.EXE"
HOST-RESOURCES-MIB::hrSWRunName.1168 "hkcmd.exe"
HOST-RESOURCES-MIB::hrSWRunName.1184 "epm-dm.exe"
HOST-RESOURCES-MIB::hrSWRunName.1188 "SVCHOST.EXE"
HOST-RESOURCES-MIB::hrSWRunName.1236 "SVCHOST.EXE"
HOST-RESOURCES-MIB::hrSWRunName.1256 "pSSClient.exe"
HOST-RESOURCES-MIB::hrSWRunName.1260 "jusched.exe"
HOST-RESOURCES-MIB::hrSWRunName.1296 "ccApp.exe"
HOST-RESOURCES-MIB::hrSWRunName.1308 "jucheck.exe"
HOST-RESOURCES-MIB::hrSWRunName.1456 "WinSCP3.exe"
HOST-RESOURCES-MIB::hrSWRunName.1472 "ctfmon.exe"
HOST-RESOURCES-MIB::hrSWRunName.1480 "ccSetMgr.exe"
HOST-RESOURCES-MIB::hrSWRunName.1532 "ccEvtMgr.exe"
HOST-RESOURCES-MIB::hrSWRunName.1684 "SPOOLSV.EXE"
...itd itd.
[ Shadowed @ 23.09.2005. 10:04 ] @
AFAIK nije potrebno nista od servera da se instalira. Potreban je odgovarajuci task manager. Microsoft daje neki uz Visual Studio. Mislim da se zove samo Process (ili Processes). Potrazi na MS-ovom sajtu, mozda ima za download.
[ Walker @ 23.09.2005. 12:42 ] @
A da probas ovo mozda pomogne: idi u help& support,pa pod pick a task klikni na use Tools to view computer info..,pa onda levo imas Advanced Sytem Info..,klikni tu pa imas
onda desno view information for another computer.
[ duja23 @ 23.09.2005. 16:04 ] @
Nista mi nije pomoglo :(
Skinuo sam Snmp Tool (i Snmp Agent) ali ne znam kako da izlistam procese na drugom racunaru (koji ima pokrenut agent).
Ove druge dve solucije - microsft nema takvu stvar za download, a u help&support ne mogu ni da udjem jer je taj service u XP iskljucen kod mene :(
[ G_M @ 04.10.2005. 07:57 ] @
http://www.sysinternals.com/Utilities/PsTools.html

ovde ces naci sve potrebno

pslist - lista procese
pskill - ubija (iskljucuje) procese

Pozdrav!
[ srbaja @ 06.10.2005. 18:59 ] @
Tasklist

Displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer.

Syntax:

tasklist[.exe] [/s computer] [/u domain\user [/p password]] [/fo {TABLE|LIST|CSV}] [/nh] [/fi FilterName [/fi FilterName2 [ ... ]]] [/m [ModuleName] | /svc | /v]