Custom software unventory rule (or label) on process running
I need a custom software inventory rule to detect the popup agent for a program called GoPrint. Though I could look for the existence of its gspopup.exe file where I expect it under %ProgramFiles%, it would be better if I could detect that the process gspopup.exe is actually running (because it may have failed to load at startup, which means the installation was not really completed correctly).
So: what's the best way to check for this? Use ShellCommandTextReturn with tasklist.exe? Or with a WMIC command? Is there another way?
If you've done a custom inventory rule that checks if a process is running, I'd like to hear how you did it. Or maybe instead of a custom inventory rule, you did a smart label checking the PROCESS table directly? If so, would you post the query syntax for that smart label? Anything along these lines would be greatly appreciated. I know I'll figure it out eventually by trial and error, but I'd prefer to learn from the accumulated wisdom of this group. Sande
So: what's the best way to check for this? Use ShellCommandTextReturn with tasklist.exe? Or with a WMIC command? Is there another way?
If you've done a custom inventory rule that checks if a process is running, I'd like to hear how you did it. Or maybe instead of a custom inventory rule, you did a smart label checking the PROCESS table directly? If so, would you post the query syntax for that smart label? Anything along these lines would be greatly appreciated. I know I'll figure it out eventually by trial and error, but I'd prefer to learn from the accumulated wisdom of this group. Sande
0 Comments
[ + ] Show comments
Answers (5)
Please log in to answer
Posted by:
cblake
13 years ago
Sande- what are you hoping to accomplish ultimately? Ensure the process is running? Uninstall the software? There may be another path to enlightenment if we know that...
Posted by:
GillySpy
13 years ago
It sounds like your yardstick for determining a complete install is where gspopup.exe can run. If you're certain that is a good yardstick then I would track its ability to launch that process in a script by setting a regkey and then use a custom inventory rule to check the reg key. e.g
http://www.kace.com/support/kb/index.php?action=artikel&cat=5&id=968&artlang=en
Using Tasklist | find /I "gspopup" should do it for your command line.
I'm not sure how you installed GoPrint to begin with but you may want to forego an MI here and install it via the same script. E.g
http://www.kace.com/support/kb/index.php?action=artikel&cat=5&id=968&artlang=en
Using Tasklist | find /I "gspopup" should do it for your command line.
I'm not sure how you installed GoPrint to begin with but you may want to forego an MI here and install it via the same script. E.g
- Task1 install GoPrint
- Task 2a check gspopup.exe requirement
- Task 2b flag status in registry
Posted by:
snissen
13 years ago
What am I hoping to accomplish? One possibility would be an entry under Installed Programs on each machine that has this GoPrint popup program. Since the program has no installer, it won't show up without a custom software inventory rule.
Alternatively, I'd accept a smart label that identifies machines that have this popup running. Why running rather than just the existence of gspopup.exe under C:\Program Files? Because we're having a problem with a few users shutting down programs they think are unnecessary. I'd like to know it's actually in memory (or not), or that it was at last check-in.
There is no installer for the GoPrint popup, so I'll be preparing one for KBOX distribution. However, the popup has been around for a couple of years, so there are machines on which someone installed it manually, and I can't be sure exactly where they put it (under C:\Program Files\GoPrint? under C:\GS4?) or how it's being loaded (Startup group? user or machine Run registry key?) or when (at startup? manually?). So the safest test is if gspopup.exe is actually in memory; I don't care how it got loaded or when or where from.
I'm comfortable working with the SQL queries that are the heart of Smart Labels. I just need an example of how the Process table might be joined to the Machine table, then I can fiddle with the conditions. Sande
Alternatively, I'd accept a smart label that identifies machines that have this popup running. Why running rather than just the existence of gspopup.exe under C:\Program Files? Because we're having a problem with a few users shutting down programs they think are unnecessary. I'd like to know it's actually in memory (or not), or that it was at last check-in.
There is no installer for the GoPrint popup, so I'll be preparing one for KBOX distribution. However, the popup has been around for a couple of years, so there are machines on which someone installed it manually, and I can't be sure exactly where they put it (under C:\Program Files\GoPrint? under C:\GS4?) or how it's being loaded (Startup group? user or machine Run registry key?) or when (at startup? manually?). So the safest test is if gspopup.exe is actually in memory; I don't care how it got loaded or when or where from.
I'm comfortable working with the SQL queries that are the heart of Smart Labels. I just need an example of how the Process table might be joined to the Machine table, then I can fiddle with the conditions. Sande
Posted by:
GillySpy
13 years ago
if you want it in inventory see my other post. If you want to use labels and just need a hint the PROCESS table relates to MACHINE via MACHINE_PROCESS_JT
e.g.
e.g.
...
MACHINE M
JOIN MACHINE_PROCESS_JT MP ON MP.MACHINE_ID = M.ID
JOIN PROCESS P ON MP.PROCESS_ID=P.ID and NAME LIKE 'gspopup%'
...
Posted by:
snissen
13 years ago
Thanks, Gerald! Somehow, in looking at the database, I missed the MACHINE_PROCESS_JT table. Is there an Entity-Relationship diagram posted anywhere? Sande
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.