Network service WMI

[Alex]

Dear colleagues,

how can I determine who (which computer or IP) is running a service on my
computer.

E.g. WMIPRVSE.EXE is running LOCAL but also there is an service running as
NETWORK SERVICE. I now that this service is triggered by an extrnal computer
(inventory software). As well SVCHOST.exe seems to be initiated by an
external program on a other computer.

I am simple interessted who is making my computer so slow and who tries to
collect / connect to my computer with which service.

Thanks Alex

 

[Jeffery Hicks]

Dear colleagues,

how can I determine who (which computer or IP) is running a service on my
computer.

E.g. WMIPRVSE.EXE is running LOCAL but also there is an service running as
NETWORK SERVICE. I now that this service is triggered by an extrnal computer
(inventory software). As well SVCHOST.exe seems to be initiated by an
external program on a other computer.

I am simple interessted who is making my computer so slow and who tries to
collect / connect to my computer with which service.

Thanks Alex

The StartName of the service object shows the account being used to
run the service, not necessarily who might be connecting to you
remotely. Network Service is just another service account like LocalSystem.

--
Jeffery Hicks
SAPIEN Technologies - Scripting, Simplified.

blog: http://blog.SAPIEN.com
Community: http://www.scriptinganswers.com
Training: http://www.ScriptingTraining.com
Books: http://www.SAPIENPress.com
Editor: http://www.primalscript.com
Tools: http://www.scriptingoutpost.com

"Those who forget to script it are doomed to repeat it."