[转载]查找进程所有者函数

查找进程所有者
来源已不可考,无法提供!

filter Get-ProcessOwner
{
  $id = $_.ID
  $info = (Get-WmiObject -Class Win32_Process -Filter "Handle=$id").GetOwner()
  if ($info.ReturnValue -eq 2)
  {
    $owner = '[Access Denied]'
  }
  else
  {
    $owner = '{0}\{1}' -f $info.Domain, $info.User
  }
  $_ | Add-Member -MemberType NoteProperty -Name Owner -Value $owner -PassThru
}

例子1: Get-Process | Where-Object MainWindowTitle | Get-ProcessOwner | Select-Object -Property Name, ID, Owner

例子2: Get-Process -Id $pid | Get-ProcessOwner | Select-Object -Property Name, ID, Owner

posted @ 2016-02-22 19:45  RayNet  阅读(189)  评论(0编辑  收藏  举报