远程抓取win7 的用户登录时间

  protected void Page_Load(object sender, EventArgs e)

        {

            InvokeSystemPS("query user /server:192.168.1.222");

            //test();

        }



        public static void InvokeSystemPS(string cmd)

        {

            List<string> ps = new List<string>();

            ps.Add("Set-ExecutionPolicy RemoteSigned");

            ps.Add("Set-ExecutionPolicy -ExecutionPolicy Unrestricted");

            ps.Add("& " + cmd);

            Runspace runspace = RunspaceFactory.CreateRunspace();

            runspace.Open();

            Pipeline pipeline = runspace.CreatePipeline();

            foreach (var scr in ps)

            {

                pipeline.Commands.AddScript(scr);

            }

            Collection<PSObject> psObjects= pipeline.Invoke();//Execute the ps script

            PSObject[] abc = psObjects.ToArray();

            string [] ss=abc[1].BaseObject.ToString().Split(' ');

            runspace.Close();

        }

  public string GetFreeTime(string IPAddress)

        {

            string cmd = "query user /server:" + IPAddress;

            List<string> ps = new List<string>();

            ps.Add("Set-ExecutionPolicy RemoteSigned");

            ps.Add("Set-ExecutionPolicy -ExecutionPolicy Unrestricted");

            ps.Add("& " + cmd);

            Runspace runspace = RunspaceFactory.CreateRunspace();

            runspace.Open();

            Pipeline pipeline = runspace.CreatePipeline();

            foreach (var scr in ps)

            {

                pipeline.Commands.AddScript(scr);

            }

            Collection<PSObject> psObjects = pipeline.Invoke();//Execute the ps script

            runspace.Close();



            string[] arr = psObjects[1].BaseObject.ToString().Split(' ');



            StringBuilder str = new StringBuilder();

            for (int i = 0; i < arr.Length; i++)

            {

                if (arr[i] != "")

                {

                    str.Append(arr[i] + ",");

                }

            }

            string[] tmp = str.ToString().Split(',');



            return tmp[4];



        }

 

 在win7 中会报错，需要做如下修改

 

 

 

 

Solution

On the machine that you cannot message to:

Use regedit to navigate to: HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

Then change the following value:

 

Name : AllowRemoteRPC

Type : REG_DWORD

Value : 1

 

Reboot. Now it should work.

 

无法将“query”项识别为 cmdlet、函数、脚本文件或可运行程序的名称。请检查名称的拼写，如果包括路径，请确保路径正确，然后重试。

出现这个错误是这个方法的需要在IIS中运行，不能再本地调试，而且应用程序池的账号需要在被抓去机器的管理员组中（最好）