Windows sysinternals

188 Part II Usage Guide
In the preceding example, the user running PsInfo had X: mapped to a remote file share.
When querying drive information from remote computers, PsInfo gathers information in the
SYSTEM context, so only globally-visible volumes are reported. This will not include remote
drive mappings unless the mappings are created in the SYSTEM context, which makes them
visible to all processes on the computer.
Note PsInfo does not distinguish SUBST associations. If a drive letter is associated with a local
path, it will appear in the listing as another fixed drive with the exact same characteristics as the
real volume on the system.
The –h option reports installed hotfixes on the target system. Hotfix information is gathered
from several points in the registry that are known to contain information about Windows and
Internet Explorer hotfixes.
The –s option reports installed software applications, according to uninstall information for
the applications found in the registry.
To report the results as comma-separated values (CSVs), add the –c option to the command
line. Results from each computer are reported on one line, which is helpful for generating
a spreadsheet. To use a character other than a comma as the delimiter, add the –t option
followed by the desired character. To use the tab character, use \t as in the following
example:
psinfo -c -t \t
If PsInfo is reporting on the local computer or a single remote computer, PsInfo’s exit code is
the service pack number of that system. When reporting on multiple systems, PsInfo returns
a conventional success or failure code.
PsKill
PsKill is a command-line utility to terminate processes by ID or by image name. It can also be
used to terminate all the descendent processes of the target process. And as with all other
PsTools, it can target processes and process trees on remote computers, using alternate
credentials if needed.
Warning PsKill terminates processes immediately. Forcibly terminating a process does not
give it an opportunity to shut down cleanly and can cause data loss or system instability. In
addition, PsKill does not provide extra warnings if you try to terminate a system-critical process
such as Csrss.exe. Terminating a system-critical process results in an immediate Windows
blue-screen crash.
www.it-ebooks.info