I'm toying with an idea for a script that would update a computer's details in Active directory with its make and model information. Ideally, I'd like this script to access AD via its computer account, which means I'd need to have the script run as "NT Authority\NetworkService". Is this something that's possible? Alternatively, could I impersonate NetworkService in the script/executable?
Run Process – How to Run a Process as NT Authority\NetworkService
active-directorySecurityservice-accountswindows
Related Solutions
I've had success with Sysinternals Process Explorer. With this, you can search to find what process(es) have a file open, and you can use it to close the handle(s) if you want. Of course, it is safer to close the whole process. Exercise caution and judgement.
To find a specific file, use the menu option Find->Find Handle or DLL... Type in part of the path to the file. The list of processes will appear below.
If you prefer command line, Sysinternals suite includes command line tool Handle, that lists open handles.
Examples
c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "e:\"(finds all files opened from drivee:\"c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "file-or-path-in-question"
Related Topic
- Windows – Finding hardware manufacturer, model and serial number
- Security – Our security auditor is an idiot. How to give him the information he wants
- Ssl – use Active Directory as a CA for creating test SSL certificates for IIS
- GPO: how to limit the users able to logon to PC
- Security – Allow members of a group to be unlocked by a specific account on AD
- Active Directory, wildcard security certificate, and remote access
- active-directory – How to Update Group Membership Remotely
Best Answer
You can use devxexec: http://blog.developex.com/?p=1053
For example:
devxexec.exe /user:NETWORK_SERVICE cmd