Did anyone manage to kill the process over network?

formingus · Feb 16, 2025

Did anyone manage to kill the process over the network?
Even with the correct username and password, I cannot kill the network process!
I have Admin rights, share is enabled, can communicate on the network, and swap files as well but whenever I try to use the kill process it says wrong user and pass but those are 100% correct.

I try following but unluckily

@echo off
taskkill /s workstation /u AdminUsername /p AdminPassword /IM postimage.exe /F
echo Process postimage.exe terminated on workstation
pause

wmic /node:"workstation" /user:"AdminUsername" /password:"AdminPassword" process where name="postimage.exe" call terminate
echo Process postimage.exe terminated on workstation
pause

Tester · Feb 16, 2025

pc on domain of local account?

try for local account: taskkill /s workstation /u .\AdminUsername /p AdminPassword /IM postimage.exe /F <-- added .\
on domain /u domainname\adminusername

garlin · Feb 16, 2025

Have you tried changing the UAC remote restrictions?
How to disable UAC remote restrictions

neemobeer · Feb 16, 2025

Powershell way

Powershell:

$creds = Get-Credential
$processName = "*something*"

Invoke-Command -ComputerName "computer1" -Credential $creds -ScriptBlock { Get-Process -Name $using:processName | Stop-Process}

dacrone · Feb 16, 2025

Or PS Session to it via powershell and execute the task

formingus · Wednesday at 5:31 AM

Tester said:
pc on domain of local account?

try for local account: taskkill /s workstation /u .\AdminUsername /p AdminPassword /IM postimage.exe /F <-- added .\
on domain /u domainname\adminusername

I am getting the wrong user or password, but those are 100% correct

formingus · Wednesday at 5:41 AM

garlin said:
Have you tried changing the UAC remote restrictions?
How to disable UAC remote restrictions

Yes, Disabled Completely UAC including Reg hack HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System still same

formingus · Wednesday at 5:46 AM

neemobeer said:

Powershell way

Powershell:

$creds = Get-Credential
$processName = "*something*"

Invoke-Command -ComputerName "computer1" -Credential $creds -ScriptBlock { Get-Process -Name $using:processName | Stop-Process}

PS C:\Users\formi> $creds = Get-Credential

cmdlet Get-Credential at command pipeline position 1
Supply values for the following parameters:
Credential
PS C:\Users\formi> $processName = "*postimage.exe*"
PS C:\Users\formi>
PS C:\Users\formi> Invoke-Command -ComputerName "workstation" -Credential $creds -ScriptBlock { Get-Process -Name $using

rocessName | Stop-Process}
[workstation] Connecting to remote server workstation failed with the following error message : The WinRM client
cannot process the request. If the authentication scheme is different from Kerberos, or if the client computer is not
joined to a domain, then HTTPS transport must be used or the destination machine must be added to the TrustedHosts
configuration setting. Use winrm.cmd to configure TrustedHosts. Note that computers in the TrustedHosts list might not
be authenticated. You can get more information about that by running the following command: winrm help config. For
more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (workstation:String) [], PSRemotingTransportException
+ FullyQualifiedErrorId : ServerNotTrusted,PSSessionStateBroken
PS C:\Users\formi>

formingus · Wednesday at 5:47 AM

dacrone said:
Or PS Session to it via powershell and execute the task

$creds = Get-Credential
$processName = "*postimage.exe*"

Invoke-Command -ComputerName "workstation" -Credential $creds -ScriptBlock { Get-Process -Name $using

rocessName | Stop-Process}

But getting error

dacrone · Wednesday at 11:57 AM

.https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enter-pssession?view=powershell-7.4

enter ps session and then run your commands on that pc

neemobeer · Wednesday at 12:34 PM

If these are not domain joined systems you need to do the following
In an elevated Powershell console
Run the following

Powershell:

Set-NetConnectionProfile -NetworkCategory Private
winrm quickconfig
Set-Item WSMAN:\localhost\Client\TrustedHosts -Value <your_ip_network>

IP network will be the network address, to get this
Look at your IP and your subnet. Most likely your subnet will be 255.255.255.0. If so, then take your IP address and replace the last dot separated digit and replace it with a 0 and add a /24

Example if my IP is 192.168.1.56 and my subnet is 255.255.255.0
then the command would be

Code:

Set-Item WSMAN:/localhost/Client/TrustedHosts -Value "192.168.1.0/24"

formingus · Wednesday at 1:41 PM

neemobeer said:
If these are not domain joined systems you need to do the following
In an elevated Powershell console
Run the following

Powershell:

Set-NetConnectionProfile -NetworkCategory Private winrm quickconfig Set-Item WSMAN:\localhost\Client\TrustedHosts -Value <your_ip_network>

IP network will be the network address, to get this
Look at your IP and your subnet. Most likely your subnet will be 255.255.255.0. If so, then take your IP address and replace the last dot separated digit and replace it with a 0 and add a /24

Example if my IP is 192.168.1.56 and my subnet is 255.255.255.0
then the command would be

Code:

Set-Item WSMAN:/localhost/Client/TrustedHosts -Value "192.168.1.0/24"

formingus · Wednesday at 1:45 PM

dacrone said:
.https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enter-pssession?view=powershell-7.4

enter ps session and then run your commands on that pc

Unfortunately, i am not familiar with programming and don't understand very well, If you can help will be g8
Remote PC name Workstation
Remote program name postimage.exe
Remote user formi
Remote pass "I will write if need"

formingus · Wednesday at 1:47 PM

dacrone said:
.https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enter-pssession?view=powershell-7.4

enter ps session and then run your commands on that pc

formingus · Wednesday at 1:53 PM

dacrone said:
.https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/enter-pssession?view=powershell-7.4

enter ps session and then run your commands on that pc

I added as error says "Set-Item WSMan:\localhost\Client\TrustedHosts -Value 'workstation' -Concatenate" but still refuse

dacrone · Wednesday at 1:57 PM

open powershell as admin

formingus said:
I added as error says "Set-Item WSMan:\localhost\Client\TrustedHosts -Value 'workstation' -Concatenate" but still refuse

Code:

Enter-PSSession -ComputerName RremotePCnameHere -Credential your_name_here

formingus · Wednesday at 2:49 PM

dacrone said:
open powershell as admin

Code:

Enter-PSSession -ComputerName RremotePCnameHere -Credential your_name_here

formingus · Wednesday at 2:57 PM

What is strange is that WORKSTATION does not appear on NETWORK, but I can connect to Network shared drives WO Problem

But I Can connect

formingus · Wednesday at 2:58 PM

formingus · Thursday at 6:39 AM

Any one to help ?

Did anyone manage to kill the process over network?

Active member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Active member

Attachments

My Computer

Active member

My Computer

Active member

My Computer

Active member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Active member

My Computer

Active member

My Computer

Active member

My Computer

Active member

My Computer

Well-known member

My Computer

Active member

My Computer

Active member

My Computer

Active member

My Computer

Active member

My Computer