远程计算机进程/服务启动停止（WMI）

WMI的远程管理需要其计算机的本地管理员组权限，例：gwmi win32_computersystem -computer win08r2d

#在远程计算机上启动 notepad.exe 进程
invoke-wmimethod -path win32_process -name create -argumentlist notepad.exe -computername "win08r2d"

#停止 notepad.exe 进程
$np = get-wmiobject -query "select * from win32_process where name='notepad.exe'" -computername "win08r2d"
$np | remove-wmiobject

Invoke-WmiMethod -Class Win32_Process -Name Create -ArgumentList "GPUPDATE /FORCE" -EnableAllPrivileges -ComputerName $RemoteComputer

==========================================

获取远程计算机上的服务
$server = gwmi win32_service -ComputerName win08r2d|?{$_.name -eq "dhcp"}

#查看服务当前运行状态
$server.state

#更改服务启动类型：
$server.ChangeStartMode("Automatic") ，不可以为“Auto”
$server.ChangeStartMode("Manual")
$server.ChangeStartMode("Disabled")

返回值中 ReturnValue : 0 表示成功

#启动/停止服务
$server.StopService()
$server.StartService()

服务启动类型如下：

Value	Meaning
Boot	Device driver started by the operating system loader. This value is valid only for driver services.
System	Device driver started by the operating system initialization process. This value is valid only for driver services.
Automatic	Service to be started automatically by the Service Control Manager during system startup.
Manual	Service to be started by the Service Control Manager when a process calls theStartService method.
Disabled	Service that can no longer be started.

Return code	Description
0	Success
1	Not Supported
2	Access Denied
3	Dependent Services Running
4	Invalid Service Control
5	Service Cannot Accept Control
6	Service Not Active
7	Service Request Timeout
8	Unknown Failure
9	Path Not Found
10	Service Already Running
11	Service Database Locked
12	Service Dependency Deleted
13	Service Dependency Failure
14	Service Disabled
15	Service Logon Failure
16	Service Marked For Deletion
17	Service No Thread
18	Status Circular Dependency
19	Status Duplicate Name
20	Status Invalid Name
21	Status Invalid Parameter
22	Status Invalid Service Account
23	Status Service Exists
24	Service Already Paused

秒客网