Four practical network management system commands

1. Publish messages

Command: net send

Function: You can use this command to send messages to users in the LAN, such as notifying meetings and notifying tasks.

Format: net send IP address (computer name) "message content"

Application instance:

If you want to send a message to a computer whose IP address is 192.168.1.10, "the server will be shut down after work in five minutes", you only need to enter the following command at the command prompt: net send 192.168.1.5 "network maintenance at five o'clock P.M. today, the server must be shut down. Administrator "Wait a moment. A Window titled" Messenger Service "will pop up on the desktop of 192.168.1.5, which contains the message you sent.

Tip: to use this name to publish a message, the other party's computer must enable the messenger service by entering: Net start messenger at the command prompt.

2. Collect information

Systeminfo

Function: remotely obtain the CPU, memory, network card, and other configuration information of the LAN Computer, save it as a file, and free the network administrator.

Command Format:

Systeminfo [/S system [/u username [/P [Password] [/FO format]

Parameter List:

/S system specifies the remote system to connect.

/U [domain] User specifies the user context in which the command should be executed.

/P [Password] specifies a password for the provided user context.

/FO format specifies the format of the display result. Valid values: "table", "list", and "CSV ".

Application instance:

Before getting started, we need to collect samples on a computer for reference by other computers on the network. Open the "run" window on a Windows XP Computer and enter "systeminfo/fo csv> C: \ sysinfo.csv", where/train. Double-click the file and open it in Excel. The detailed system information is displayed.

Now we need to collect the system information of other computers on the network. Before the official collection, we need to create a LAN Computer IP list. Create a directory under the directory storing sysinfo.csvfile and name it ip.txt. Enter the IP address of the LAN client, one line per line.

After doing this, we can return to the command prompt and enter "for/F % A in (c: \ ip.txt)" in the window) do (systeminfo/S % A/u netadministrator/P test/fo csv/NH> C: \ sysinfo.csv#", where for obtain the target address from ip.txt, /u netadmin is used to specify the Administrator account of the domain./p pwd indicates the password of the administrator account. In actual use, it is changed to the information in its own network.

After the command is executed, open the file C: sysinfo.csv, and you will find that all the computer system information on the network is here, 5. Now we only need to delete unnecessary information and keep the required information. In fact, with the help of professional services such as SMS, we can also achieve statistics of network computer information, but in contrast, we can do things only with a small command of sysinfo, why bother.

3. user monitoring

Tasklist

Function: A command is used to display all processes running on a local computer or a remote computer. It can monitor user operations.

Command Format:

Tasklist [/S system [/u username [/P [Password] [/M [module] |/svc |/V] [/FI filter] [/FO format] [/NH]

Parameter description

/S system specifies the remote system to connect.

/U [domain] User specifies which user to use to execute this command.

/P [Password] specifies the password for the specified user.

/M [module] lists all processes that call the specified DLL module. If no module name is specified, all modules loaded by each process are displayed.

/Svc displays the services in each process.

/V displays details.

Application instance:

Enter "tasklist/s 192.168.1.8/u administrator/P test" (excluding quotation marks) at the command prompt to view the process 6 of the remote system with the IP address 192.168.1.8. "192.168.1.8" after the/S parameter indicates the IP address of the remote system to be viewed, and "Administrator" after/u indicates the user account used by the tasklist command, it must be a valid account on the remote system. The "test" after/P indicates the password of the administrator account.

Tip: when you use the tasklist command to view the processes in the remote system, the remote machine RPC service is required. Otherwise, the command cannot be used normally.

4. Process Termination

Tskkill

Tskkill corresponds to the tasklist command, which is used to shut down the process. We all know that we can end the processes on the local machine through it. In fact, in addition to shutting down the processes on the local machine, it can also shut down the processes on the remote computer and help administrators Control LAN users to run certain programs.For example, to shut down the qq.exe process with the IP address 192.168.1.8133, you can use either of the following methods:

You can see the following content only after replying to the post:
====================================

Method 1:

First, use tasklist to find its PID. From figure 6, we can see that the PID value of the QQ. EXE process is 892, and then run the taskkill/f/PID 1132 command. The "/PID" parameter is followed by the PID value of the process to be terminated, and/F is forced to end.

Method 2:

Run the "taskkill/f/IM qq.exe" command directly. The "/im" parameter is followed by the process image name.

Summary: in fact, some very practical tools are integrated in the system. As long as these tools are used flexibly, they can solve most of the problems. Why should we avoid using third-party tools at the risk of poisoning?