如何檢查進程是否遠程啟動

Question

我通過WMI在遠程計算機上運行進程。

是否可以在遠程計算機上簽入過程代碼（在遠程計算機上）？

我嘗試使用Process.GetCurrentProcess()和Process.GetCurrentProcess().StartInfo屬性，但沒有找到任何信息。 環境類也不包含任何信息。

我的代碼用於創建遠程進程（我在某個論壇上找到了它）：

                var connOptions = new ConnectionOptions()
                {
                    Username = "user",
                    Password = "password"
                };

            connOptions.Impersonation = ImpersonationLevel.Impersonate;
            connOptions.EnablePrivileges = true;

            var manScope = new ManagementScope(string.Format(@"\\{0}\root\cimv2", "MachineName"), connOptions);

            manScope.Connect();

            var objectGetOptions = new ObjectGetOptions();
            var managementPath = new ManagementPath("Win32_Process");
            using (var processClass = new ManagementClass(manScope, managementPath, objectGetOptions))
            {
                using (ManagementBaseObject inParams = processClass.GetMethodParameters("Create"))
                {
                    inParams["CommandLine"] = remoteFilePath;

                    using (ManagementBaseObject outParams = processClass.InvokeMethod("Create", inParams, null))
                    {
                        if ((uint)outParams["returnValue"] == 0)
                        {
                            var pid = (uint)outParams["processId"];

                            return pid;
                        }
                    }
                }
            }

Answer 1

我不知道是否可以檢測到它，但是您可以采取的一種解決方法是通過WMI啟動時傳遞一個命令行參數，說“ remotelyStarted”，然后在代碼中執行

const string REMOTELY_STARTED_FLAG = "remotelyStarted";

if(Environment.GetComandLineArgs().Contains(REMOTELY_STARTED_FLAG, StringComparison.OrdinalIgnoreCase))
{
    //Do code here if it was running remotely.
}