@gibon
Leos Marek wrote a new post, Analyze Windows memory usage with RAMMap 3 days, 6 hours ago
When you have a performance issue, random access memory (RAM) is usually the second thing to check right after the CPU counters. Let’s see how you can analyze Windows memory usage with RAMMap, a tool from the Sysinternals suite.
-
I have tried the bypassNRO.cmd again, didnt work with latest media.
The trick described in this post is still valid as per today. Tried just now, works flawlessly. -
I have tried the command with the latest Windows 11 downloaded using the Media download tool. After running it, the computer just reboots, when you connect to the internet, it will still force you to use Microsoft account.
But, the latest install media has “I dont have internet” option by default, same as in Pro version. -
Leos Marek commented on Tactical RMM: Open Source remote monitoring and management for Windows 2 weeks, 3 days ago
Thanks, already installed and testing. Looks promising!
-
Leos Marek liked the comment of Riccardo Bicelli (Rank 2) on Tactical RMM: Open Source remote monitoring and management for Windows. (So far, Riccardo Bicelli (Rank 2) has 1 likes for this comment) 2 weeks, 3 days ago
-
Leos Marek liked Tactical RMM: Open Source remote monitoring and management for Windows. (So far, This post has 8 likes) 2 weeks, 3 days ago
-
Leos Marek commented on Tactical RMM: Open Source remote monitoring and management for Windows 2 weeks, 4 days ago
Hi Riccardo,
quick question, can you use this safely over the internet, with the client being anywhere (behind NAT, firewall).
The only requirement would be to have a public IP on the RMM server and agents connect over HTTPS?
Cheers
Leos -
Lets say the behavior is super weird. When I restart one of my servers I can then see in HKU key total 5 user profiles loaded right after the reboot, even they are for sure not logged locally, via network or RPD. There the WMI and also PsLoggedOn shows me all the names of the users.
Then I have another LAB server and there the behavior is OK. When 2 users are logged on via RDP, I see 2 names via WMI and PsLoggedOn. When 1 user logs off, I see just 1 in the result query… Rly strange.On a side note – the WMI command can only show user logged locally or via RPD, not via SMB share or so.
Thanks for the comments.
-
Sorry, but have you even tried it?
Get-CimInstance Win32_UserProfile -Filter “Loaded = $true”
Returns 8 records, while just 1 user is logged on the server… I removed the usernames obviously…
localpath
———
C:UsersYYYYY
C:UsersYYYYY
C:UsersXXXXX
C:UsersXXXXX
C:UsersAdministrator
C:WindowsServiceProfilesNetworkService
C:WindowsServiceProfilesLocalService
C:Windowssystem32configsystemprofile -
Dont think so. The query simply shown invalid data. After a server reboot I have logged on with my user (just me there) and the query returns 5 accounts (local/domain). Basically everyone who was ever logged to the server…
-
Leos Marek liked the comment of Oz Edri on Terminate Windows processes with PsKill. (So far, Oz Edri has 1 likes for this comment) 1 month ago
-
That command doesnt really show reliable information. I have 2 users logged on a server and 5 users returned with the command.. 🙂
-
Leos Marek wrote a new post, PsLoggedOn: View logged-on users in Windows 1 month ago
PsLoggedOn, a command line tool that is part of the Sysinternals suite, gets information about users logged on to Windows. Unfortunately, not everything works as it should.
-
PsList is mentioned in the post as it was released before this one.
Net commands work a bit differently, they use normal Windows API to stop a service gracefully, while PsKill terminates the process instantly. Big difference there 🙂 -
Leos Marek liked the comment of Paolo Maffezzoli (Rank 4) on Terminate Windows processes with PsKill. (So far, Paolo Maffezzoli (Rank 4) has 2 likes for this comment) 1 month, 1 week ago
-
Leos Marek wrote a new post, Terminate Windows processes with PsKill 1 month, 1 week ago
PsKill is a command-line tool that is part of the Sysinternals suite. As the name suggests, it allows you to terminate (kill) Windows processes on local or remote Windows systems.
-
Leos Marek wrote a new post, List Windows processes with PsList 1 month, 4 weeks ago
PsList is a command line tool that is part of the Sysinternals suite. It allows you to list Windows processes and get information about running processes and their runtime characteristics, including CPU and memory usage, parent–child relationships, and thread information.
-
Leos Marek liked Find and remove duplicate files with PowerShell. (So far, This post has 2 likes) 2 months, 2 weeks ago
-
Leos Marek's profile was updated 2 months, 2 weeks ago
-
Leos Marek wrote a new post,
PsInfo: Get disk space, installed applications, and other information about local and remote Windows systems 2 months, 3 weeks agoPsInfo, a command-line tool that is part of the Sysinternals suite, gets key information about Windows systems, such as the type of installation, available disk space, installed applications, kernel build number, uptime, registered owner, and the number of processors.
- Load More
