在给定进程 ID 的情况下终止 PowerShell 中的进程树

Question

Lets say I run a couple of processes from PowerShell:

$p1 = $(Start-Process -PassThru ./example.exe)
$p2 = $(Start-Process -PassThru ./example.exe)

example.exe is going to spawn a few child processes with the same name.

How do I kill just $p1 and its child processes, without killing $p2 and its child processes?

Just running Stop-Process $p1 only kills the parent process $p1 , leaving it's children running.

All of the answers I seen so far involve killing all of the processes with a certain name, but that will not work here.

Answer 1

So I couldn't really find a good way to do this, so I wrote a helper function that uses recursion to walk down the process tree:

function Kill-Tree {
    Param([int]$ppid)
    Get-CimInstance Win32_Process | Where-Object { $_.ParentProcessId -eq $ppid } | ForEach-Object { Kill-Tree $_.ProcessId }
    Stop-Process -Id $ppid
}

To use it, put it somewhere in your PowerShell script, and then just call it like so:

Kill-Tree <process_id>

Answer 2

Start-Process with -Passthru returns a System.Diagnostics.Process object. This object has an Id property which is generated by Windows and is unique.

Stop-Process has multiple signatures One looks for the process by Id, one by Name, and one looks for it by the Process object.

You are using -Passthru and capturing the output of start-process into $p1 , so you can just pass that object to Stop-Process.

Stop-Process $p1

Answer 3

If anyone landing here is looking for script to kill a process tree by specifying the name of the parent process, you can use @wheeler's Kill-Tree recursive function like so.

Note: By default, I find myself having to constantly kill eclipse and its child java process. So 'eclipse' is the default name of the process tree killed by this script, killProcTree.ps1 , if a parent process name is not provided via the $procName call parameter:

Powershell script called 'killProcTree.ps1':

param(
    [string]$procName    = 'eclipse'
)

function Kill-Tree {
    Param([int]$ppid)
    echo "Kill-Tree: killing $ppid ..."
    Get-CimInstance Win32_Process | Where-Object { $_.ParentProcessId -eq $ppid } | ForEach-Object { Kill-Tree $_.ProcessId }
    Stop-Process -Id $ppid
}

[int]$mypid = 0
[string]$myProcessToKill = (Get-Process -Name $procName -ErrorAction 0)

if ($myProcessToKill -eq "") {
    echo "$procName is not running."
} else {
    $mypid = (Get-Process -Name $procName -ErrorAction 0).Id
    echo "The $procName PID is: $mypid"
    if ($mypid -gt 1) {
        echo "Killing $procName and its children..."
        Kill-Tree $mypid
    }
}
echo "Done!"

Answer 4

我知道这个答案来晚了......但是实现这一点的更简单的方法（与 PowerShell 5.1+ 一起使用）是：

Get-Process -Name "Process Name" | Select-Object -Property Id | ForEach-Object -Process { Stop-Process -Id $_.Id -Force }

Answer 5

Hi I'm noob and I don't know if that's what you mean but I figured out that if I want to kill a process that is visible in task manager I can do it like that: (name of the process provided in -> "name of the process" below. I pref live examples so I will present it that way)

Get-Process -Name "Battle.net" | kill

It kills all process ID's related to that process which contain the name "Battle.net"