Как я могу проверить, с каким пользователем был открыт ящик cmd?

Question

Я сталкиваюсь с этой проблемой. когда я запускаю приложение, отображающее несколько ящиков cmd, благодаря им после входа в систему я могу запустить файл bach, который запустит стороннее приложение. Если я пытаюсь запустить тот же самый bach из каталога, я получаю сообщение об ошибке. Таким образом, я предполагаю, что поля cmd используют другого пользователя.

Как я могу проверить, с каким пользователем был открыт ящик cmd? Я надеюсь, что вопрос ясен.

[ ] d:\NETA\Software\BusOpt\bin_610>tasklist /fi "imagename eq cmd.exe" /v /fo:csv /nh
"cmd.exe","6132","","3","18,548 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","3740","","3","18,548 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","5396","","3","18,548 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","3292","","3","18,548 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","13136","","10","18,580 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","10484","","10","18,580 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","12876","","10","18,580 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","8056","","10","18,580 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","11044","","9","3,152 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","7868","","9","3,152 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","1188","","9","3,152 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","9328","","9","3,136 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","6764","RDP-Tcp#1","6","3,180 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","14516","RDP-Tcp#1","6","3,148 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","14240","RDP-Tcp#1","6","3,184 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","10248","RDP-Tcp#1","6","3,184 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","14196","","35","3,136 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","15120","","35","3,336 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","13216","","35","3,128 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","12376","","35","3,288 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","14116","","35","3,600 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","5012","","35","3,612 K","Unknown","N/A","0:00:00","N/A"
"cmd.exe","6436","RDP-Tcp#3","7","3,180 K","Running","EURO\AE4","0:00:00","
C:\WINDOWS\system32\cmd.exe"
"cmd.exe","11732","RDP-Tcp#3","7","3,176 K","Running","EURO\AE4","0:00:00",
"C:\WINDOWS\system32\cmd.exe"
"cmd.exe","11584","RDP-Tcp#3","7","3,316 K","Running","EURO\AE4","0:00:00",
"C:\WINDOWS\system32\cmd.exe - tasklist  /fi "imagename eq cmd.exe" /v /fo:csv /
nh"
"cmd.exe","12488","RDP-Tcp#3","7","3,164 K","Running","EURO\AE4","0:00:00",
"C:\WINDOWS\system32\cmd.exe"
"cmd.exe","14452","RDP-Tcp#3","7","3,440 K","Running","EURO\AE4","0:00:00",
"Administrator: Command Prompt - "cmd.exe" ,"6132","","3","18,548 K","Unknown","
N/A","0:00:00","N/A" - "cmd.exe" ,"3740","","3","1"
"cmd.exe","10372","RDP-Tcp#3","7","3,276 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","15100","RDP-Tcp#3","7","3,244 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","14720","RDP-Tcp#3","7","3,244 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","13896","RDP-Tcp#3","7","3,236 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","6920","RDP-Tcp#3","7","3,240 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","6800","RDP-Tcp#3","7","3,268 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","14060","RDP-Tcp#3","7","3,276 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","15008","RDP-Tcp#3","7","3,276 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","12752","RDP-Tcp#3","7","3,240 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","7408","RDP-Tcp#3","7","3,268 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","12884","RDP-Tcp#3","7","3,236 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","13744","RDP-Tcp#3","7","3,272 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","5592","RDP-Tcp#3","7","3,240 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","11944","RDP-Tcp#3","7","3,268 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","12608","RDP-Tcp#3","7","3,268 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","880","RDP-Tcp#3","7","3,272 K","Unknown","EURO\AE4","0:00:00","N
/A"
"cmd.exe","14232","RDP-Tcp#3","7","3,240 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","2088","RDP-Tcp#3","7","3,268 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","1032","RDP-Tcp#3","7","3,244 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","13044","RDP-Tcp#3","7","3,236 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","15220","RDP-Tcp#3","7","3,276 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","3648","RDP-Tcp#3","7","3,244 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","9692","RDP-Tcp#3","7","3,272 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","8864","RDP-Tcp#3","7","3,276 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","6384","RDP-Tcp#3","7","3,276 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","10916","RDP-Tcp#3","7","3,244 K","Unknown","EURO\AE4","0:00:00",
"N/A"
"cmd.exe","8232","RDP-Tcp#3","7","3,360 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","8032","RDP-Tcp#3","7","3,280 K","Unknown","EURO\AE4","0:00:00","
N/A"
"cmd.exe","10812","RDP-Tcp#3","7","3,152 K","Unknown","EURO\AE4","0:00:00",
"N/A"

Answer 1

от cmdline:

for /f "tokens=1,8,10 delims=," %a in ('tasklist /fi "imagename eq cmd.exe" /v /fo:csv /nh') do echo %~a %~b %~c

В приведенной выше строке будет напечатано имя команды, владелец и заголовок Windows для каждого запущенного в данный момент процесса cmd.exe. Например, я запустил его с несколькими разными заголовками окон на моем ноутбуке, и вы получите:

cmd.exe DOMAIN\Gbarnard Command Prompt
cmd.exe DOMAIN\Gbarnard C:\WINDOWS\system32\cmd.exe
cmd.exe DOMAIN\Gbarnard Command Prompt
cmd.exe DOMAIN\Gbarnard C:\WINDOWS\system32\cmd.exe - test_number.cmd

Чтобы запустить точно такую ​​же строку в пакетном файле, удвойте по th %, как показано ниже:

@echo off
for /f "tokens=1,8,10 delims=," %%a in ('tasklist /fi "imagename eq cmd.exe" /v /fo:csv /nh') do echo %%~a %%~b %%~c