無法遠程終止使用WMI和C的進程＃

Question

我正試圖編寫一個方法，如果它無法停止使用StopService方法，將通過進程ID終止遠程系統上的服務。我嘗試了兩種不同的方法來調用ManagementObject上的「Terminate」方法，並得到兩個不同的錯誤。對我來說，我能夠從Terminate方法獲取返回碼也很重要。

如果我直接申報ManagementPath到我要終止的過程中，我得到的錯誤「System.Management.ManagementException：無效的對象路徑」在行：

ManagementBaseObject processParams = processObj.InvokeMethod("Terminate", (ManagementBaseObject)null, null);

如果我得到一個ManagementObjectCollection和循環通過它尋找的進程ID我要終止，我得到錯誤「無效參數」，在線路：

ManagementBaseObject termParams = currentObj.InvokeMethod("Terminate", (ManagementBaseObject)null, null);

因此，在這兩種情況下，我當我嘗試調用Terminate方法時出現錯誤，但錯誤取決於我如何到達對象（直接路徑或循環集合）。

我不是認爲這與SeDebugPrivilege有關，因爲我相信如果是的話，我會得到「訪問被拒絕」或「不足的特權」。

代碼，如果我試圖直接指定路徑的過程：

public int KillServiceWMI(string serviceName, string serverName, string serverUser, string serverDomain, string serverPassword) 
{ 
    try 
    { 
     ConnectionOptions options = new ConnectionOptions(); 
     options.Impersonation = System.Management.ImpersonationLevel.Impersonate; 
     options.Username = serverDomain + "\\" + serverUser; 
     options.Password = serverPassword; 

     ManagementScope scope = new ManagementScope("\\\\" + serverName + "\\root\\cimv2", options); 
     Console.WriteLine("Connecting to scope"); 
     scope.Connect(); 

     Console.WriteLine("Getting ManagementPath"); 
     ManagementPath servicePath = new ManagementPath("Win32_Service.Name='" + serviceName + "'"); 
     Console.WriteLine("Getting ManagementObject"); 
     ManagementObject serviceObj = new ManagementObject(scope, servicePath, new ObjectGetOptions()); 
     Console.WriteLine("Name of service is " + serviceObj["DisplayName"].ToString()); 
     Console.WriteLine("Process ID of service is " + serviceObj["ProcessId"].ToString()); 
     ManagementPath processPath = new ManagementPath("Win32_Process.ProcessId='" + serviceObj["ProcessId"] + "'"); 
     ManagementObject processObj = new ManagementObject(scope, processPath, new ObjectGetOptions()); 
     ManagementBaseObject processParams = processObj.InvokeMethod("Terminate", (ManagementBaseObject)null, null); 
     int returnCode = System.Convert.ToInt32(processParams.Properties["ReturnValue"].Value); 
     return returnCode; 
    } 
    catch (Exception connectEx) 
    { 
     Console.WriteLine("Connecting to " + serverName + " caused an exception"); 
     Console.Write(connectEx); 
     return 99; 
    } 
} 

代碼，如果通過流程的集合我循環：

public int KillServiceWMI(string serviceName, string serverName, string serverUser, string serverDomain, string serverPassword) 
{ 
    try 
    { 
     ConnectionOptions options = new ConnectionOptions(); 
     options.Impersonation = System.Management.ImpersonationLevel.Impersonate; 
     options.Username = serverDomain + "\\" + serverUser; 
     options.Password = serverPassword; 

     ManagementScope scope = new ManagementScope("\\\\" + serverName + "\\root\\cimv2", options); 
     Console.WriteLine("Connecting to scope"); 
     scope.Connect(); 

     Console.WriteLine("Getting ManagementPath"); 
     ManagementPath servicePath = new ManagementPath("Win32_Service.Name='" + serviceName + "'"); 
     Console.WriteLine("Getting ManagementObject"); 
     ManagementObject serviceObj = new ManagementObject(scope, servicePath, new ObjectGetOptions()); 
     Console.WriteLine("Name of service is " + serviceObj["DisplayName"].ToString()); 
     Console.WriteLine("Process ID of service is " + serviceObj["ProcessId"].ToString()); 
     ObjectQuery serviceQuery = new ObjectQuery("SELECT * from Win32_Process WHERE ProcessID = '" + serviceObj["ProcessId"].ToString() + "'"); 
     ManagementObjectSearcher serviceSearcher = new ManagementObjectSearcher(scope, serviceQuery); 
     ManagementObjectCollection serviceColl = serviceSearcher.Get(); 
     int returnCode = 0; 
     foreach (ManagementObject currentObj in serviceColl) 
     { 
      if (currentObj["ProcessId"].ToString().Equals(serviceObj["ProcessId"].ToString(), StringComparison.OrdinalIgnoreCase)) 
      { 
       Console.WriteLine("Found process " + currentObj["ProcessId"].ToString() + ". Terminating..."); 

       ManagementBaseObject termParams = currentObj.InvokeMethod("Terminate", (ManagementBaseObject)null, null); 
       returnCode = System.Convert.ToInt32(termParams.Properties["ReturnValue"].Value); 
      } 
     } 
     return returnCode; 
    } 
    catch (Exception connectEx) 
    { 
     Console.WriteLine("Connecting to " + vaultName + " caused an exception"); 
     Console.Write(connectEx); 
     return 99; 
    } 
} 

Answer 1

我最終放棄了嘗試使用終止方法在Win32_Process上，而是使用Create來遠程調用TaskKill.exe。由於返回信息現在隱藏在taskkill.exe後面，因此我必須再次獲取進程列表並查找目標pid，以確保進程實際已終止。

ConnectionOptions options = new ConnectionOptions(); 
options.Impersonation = System.Management.ImpersonationLevel.Impersonate; 
options.Username = serverDomain + "\\" + serverUser; 
options.Password = serverPassword; 

ManagementScope scope = new ManagementScope("\\\\" + serverName + "\\root\\cimv2", options); 
Console.WriteLine("Connecting to scope"); 
scope.Connect(); 

Console.WriteLine("Getting ManagementPath"); 
ManagementPath servicePath = new ManagementPath("Win32_Service.Name='" + serviceName + "'"); 
Console.WriteLine("Getting ManagementObject"); 
ManagementObject serviceObj = new ManagementObject(scope, servicePath, new ObjectGetOptions()); 
Console.WriteLine("Name of service is " + serviceObj["DisplayName"].ToString()); 
Console.WriteLine("Process ID of service is " + serviceObj["ProcessId"].ToString()); 

// use processid to kill process with taskkill 
ObjectGetOptions processObjGetOpt = new ObjectGetOptions(); 
ManagementPath processPath = new ManagementPath("Win32_Process"); 
ManagementClass processClass = new ManagementClass(scope, processPath, processObjGetOpt); 
ManagementBaseObject processInParams = processClass.GetMethodParameters("Create"); 
processInParams["CommandLine"] = string.Format("cmd /c \"taskkill /f /pid {0}\"", serviceObj["ProcessId"].ToString()); 
ManagementBaseObject outParams = processClass.InvokeMethod("Create", processInParams, null); 
Console.WriteLine("Return code for taskkill: " + outParams["returnValue"]); 
int returnCode = System.Convert.ToInt32(outParams["returnValue"]);