Powershell commands 之 Add-Computer

本文介绍如何使用PowerShell的Add-Computer命令将计算机加入指定的域,并提供了使用当前用户凭据加入域并自动重启计算机的例子。

Add-Computer

作用:
      添加计算机到域(Domain)或者组(Group)
语法:
      Add-Computer [-Credential <PSCredential>] [-OUPath <string>] [-Passthru] [-Reboot <switch>] [-Server <string>] [-Un
 secure <switch>] [[-ComputerName] <String []>] [-DomainName] <string> [-confirm] [-whatif] [<CommonParameters>]

 Add-Computer [-Credential <PSCredential>] [-Passthru] [-Reboot <switch>] [[-ComputerName] <String []>] [-WorkGroupN
 ame] <string> [-confirm] [-whatif] [<CommonParameters>]
例子 1:
     add-computer -domain domain1.corp.company -reboot
利用当前用户账号信息将本地计算机添加到域,然后重启机器.

PS C:\Users\Administrator> # 重置所有UWP应用(管理员PowerShell) PS C:\Users\Administrator> Get-AppXPackage -AllUsers | Foreach { >> Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" >> } >> Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.Windows.ShellExperienceHost_10.0.22621.2506_neutral_neutral_ cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-d7d7-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-d7d7-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.Windows.ShellExperienceHost_10.0.22621.2506_neutral_neutral_ cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-8ade-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-8ade-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.Windows.StartMenuExperienceHost_10.0.22621.2506_neutral_neut ral_cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-28df-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-28df-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: MicrosoftWindows.Client.CBS_1000.22681.1000.0_x64__cw5n1h2txyewy。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0002-0433-4e222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0002-0433-4e222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Windows\Syst...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: Microsoft.MicrosoftOfficeHub_18.2204.1141.0_x64__8wekyb3d8bbwe。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-79fa-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-79fa-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Program File...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D06, 无法安装此程序包,因为已安装该程序包的更高版本。 Windows 无法安装程序包 Microsoft.VCLibs.140.00_14.0.30704.0_x64__8wekyb3d8bbwe,因为它的版本为 14.0.30704.0。已安装此程 序包的更高版本 14.0.33519.0。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0001-aefb-4d222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0001-aefb-4d222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Program File...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand Add-AppxPackage : 部署失败,原因是 HRESULT: 0x80073D02, 无法安装程序包,原因是它修改的资源当前正在使用中。 错误 0x80073D02: 无法安装,因为需要关闭以下应用: 9426MICRO-STARINTERNATION.MSICenter_2.0.52.0_x64__kzh8wxbdkxb8p。 注意: 有关其他信息,请在事件日志中查找 [ActivityId] 224db599-1027-0002-7266-4e222710dc01,或使用命令行 Get-AppPackageLo g -ActivityID 224db599-1027-0002-7266-4e222710dc01 所在位置 行:2 字符: 5 + Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLo ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (C:\Program File...ppXManifest.xml:String) [Add-AppxPackage], Exception + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand PS C:\Users\Administrator> # 重建系统图标缓存 PS C:\Users\Administrator> ie4uinit.exe -show PS C:\Users\Administrator> taskkill /f /im explorer.exe 成功: 已终止进程 "explorer.exe",其 PID 为 6916。 PS C:\Users\Administrator> start explorer.exe PS C:\Users\Administrator> PS C:\Users\Administrator> # 1. 检查系统文件 PS C:\Users\Administrator> sfc /scannow 开始系统扫描。此过程将需要一些时间。 开始系统扫描的验证阶段。 验证 100% 已完成。 Windows 资源保护未找到任何完整性冲突。 PS C:\Users\Administrator> PS C:\Users\Administrator> # 2. 修复系统映像 PS C:\Users\Administrator> DISM /Online /Cleanup-Image /RestoreHealth 部署映像服务和管理工具 版本: 10.0.22621.2792 映像版本: 10.0.22631.2861 [==========================100.0%==========================] 错误: 0x800f081f 找不到源文件。 请使用“源”选项指定还原该功能所需的文件位置。有关指定源位置的详细信息,请参阅 https://go.microsoft.com/fwlink/?LinkId=243077。 可以在 C:\Windows\Logs\DISM\dism.log 上找到 DISM 日志文件 PS C:\Users\Administrator> PS C:\Users\Administrator> # 3. 检查.NET Framework状态 PS C:\Users\Administrator> dotnet --info .NET SDK: Version: 9.0.109 Commit: 08d4728191 Workload version: 9.0.100-manifests.70d87660 MSBuild version: 17.12.41+9dcc26a5f Runtime Environment: OS Name: Windows OS Version: 10.0.22631 OS Platform: Windows RID: win-x64 Base Path: C:\Program Files\dotnet\sdk\9.0.109\ .NET workloads installed: There are no installed workloads to display. Configured to use loose manifests when installing new manifests. Host: Version: 9.0.8 Architecture: x64 Commit: aae90fa090 .NET SDKs installed: 9.0.109 [C:\Program Files\dotnet\sdk] .NET runtimes installed: Microsoft.AspNetCore.App 9.0.8 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App] Microsoft.NETCore.App 9.0.8 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App] Microsoft.WindowsDesktop.App 9.0.8 [C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App] Other architectures found: None Environment variables: Not set global.json file: Not found Learn more: https://aka.ms/dotnet/info Download .NET: https://aka.ms/dotnet/download PS C:\Users\Administrator> Repair-WindowsImage -Online -RestoreHealth Repair-WindowsImage : 还原操作失败。找不到修复来源,或者无法修复组件存储。 所在位置 行:1 字符: 1 + Repair-WindowsImage -Online -RestoreHealth + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Repair-WindowsImage], COMException + FullyQualifiedErrorId : Microsoft.Dism.Commands.RepairWindowsImageCommand PS C:\Users\Administrator> # 监控RuntimeBroker资源使用 PS C:\Users\Administrator> Get-Process RuntimeBroker | Format-List * Name : RuntimeBroker Id : 4288 PriorityClass : Normal FileVersion : 10.0.22621.2506 (WinBuild.160101.0800) HandleCount : 237 WorkingSet : 14184448 PagedMemorySize : 2723840 PrivateMemorySize : 2723840 VirtualMemorySize : 151080960 TotalProcessorTime : 00:00:00 SI : 1 Handles : 237 VM : 2203469303808 WS : 14184448 PM : 2723840 NPM : 12912 Path : C:\Windows\System32\RuntimeBroker.exe Company : Microsoft Corporation CPU : 0 ProductVersion : 10.0.22621.2506 Description : Runtime Broker Product : Microsoft® Windows® Operating System __NounName : Process BasePriority : 8 ExitCode : HasExited : False ExitTime : Handle : 3908 SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle MachineName : . MainWindowHandle : 0 MainWindowTitle : MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe) MaxWorkingSet : 1413120 MinWorkingSet : 204800 Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu le (KERNELBASE.dll)...} NonpagedSystemMemorySize : 12912 NonpagedSystemMemorySize64 : 12912 PagedMemorySize64 : 2723840 PagedSystemMemorySize : 225160 PagedSystemMemorySize64 : 225160 PeakPagedMemorySize : 3244032 PeakPagedMemorySize64 : 3244032 PeakWorkingSet : 15675392 PeakWorkingSet64 : 15675392 PeakVirtualMemorySize : 158023680 PeakVirtualMemorySize64 : 2203476246528 PriorityBoostEnabled : True PrivateMemorySize64 : 2723840 PrivilegedProcessorTime : 00:00:00 ProcessName : RuntimeBroker ProcessorAffinity : 1048575 Responding : True SessionId : 1 StartInfo : System.Diagnostics.ProcessStartInfo StartTime : 2025/8/18 18:14:45 SynchronizingObject : Threads : {13188, 8792, 2668, 4540...} UserProcessorTime : 00:00:00 VirtualMemorySize64 : 2203469303808 EnableRaisingEvents : False StandardInput : StandardOutput : StandardError : WorkingSet64 : 14184448 Site : Container : Name : RuntimeBroker Id : 6212 PriorityClass : Normal FileVersion : 10.0.22621.2506 (WinBuild.160101.0800) HandleCount : 252 WorkingSet : 18063360 PagedMemorySize : 3428352 PrivateMemorySize : 3428352 VirtualMemorySize : 140181504 TotalProcessorTime : 00:00:00.0156250 SI : 1 Handles : 252 VM : 2203458404352 WS : 18063360 PM : 3428352 NPM : 13728 Path : C:\Windows\System32\RuntimeBroker.exe Company : Microsoft Corporation CPU : 0.015625 ProductVersion : 10.0.22621.2506 Description : Runtime Broker Product : Microsoft® Windows® Operating System __NounName : Process BasePriority : 8 ExitCode : HasExited : False ExitTime : Handle : 3628 SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle MachineName : . MainWindowHandle : 0 MainWindowTitle : MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe) MaxWorkingSet : 1413120 MinWorkingSet : 204800 Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu le (KERNELBASE.dll)...} NonpagedSystemMemorySize : 13728 NonpagedSystemMemorySize64 : 13728 PagedMemorySize64 : 3428352 PagedSystemMemorySize : 202368 PagedSystemMemorySize64 : 202368 PeakPagedMemorySize : 5062656 PeakPagedMemorySize64 : 5062656 PeakWorkingSet : 24006656 PeakWorkingSet64 : 24006656 PeakVirtualMemorySize : 174608384 PeakVirtualMemorySize64 : 2203492831232 PriorityBoostEnabled : True PrivateMemorySize64 : 3428352 PrivilegedProcessorTime : 00:00:00.0156250 ProcessName : RuntimeBroker ProcessorAffinity : 1048575 Responding : True SessionId : 1 StartInfo : System.Diagnostics.ProcessStartInfo StartTime : 2025/8/18 18:14:41 SynchronizingObject : Threads : {8376, 9172, 5520, 5272...} UserProcessorTime : 00:00:00 VirtualMemorySize64 : 2203458404352 EnableRaisingEvents : False StandardInput : StandardOutput : StandardError : WorkingSet64 : 18063360 Site : Container : Name : RuntimeBroker Id : 8304 PriorityClass : Normal FileVersion : 10.0.22621.2506 (WinBuild.160101.0800) HandleCount : 297 WorkingSet : 24907776 PagedMemorySize : 4210688 PrivateMemorySize : 4210688 VirtualMemorySize : 181202944 TotalProcessorTime : 00:00:00.1406250 SI : 1 Handles : 297 VM : 2203499425792 WS : 24907776 PM : 4210688 NPM : 16992 Path : C:\Windows\System32\RuntimeBroker.exe Company : Microsoft Corporation CPU : 0.140625 ProductVersion : 10.0.22621.2506 Description : Runtime Broker Product : Microsoft® Windows® Operating System __NounName : Process BasePriority : 8 ExitCode : HasExited : False ExitTime : Handle : 3692 SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle MachineName : . MainWindowHandle : 0 MainWindowTitle : MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe) MaxWorkingSet : 1413120 MinWorkingSet : 204800 Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu le (KERNELBASE.dll)...} NonpagedSystemMemorySize : 16992 NonpagedSystemMemorySize64 : 16992 PagedMemorySize64 : 4210688 PagedSystemMemorySize : 252392 PagedSystemMemorySize64 : 252392 PeakPagedMemorySize : 5419008 PeakPagedMemorySize64 : 5419008 PeakWorkingSet : 26435584 PeakWorkingSet64 : 26435584 PeakVirtualMemorySize : 192684032 PeakVirtualMemorySize64 : 2203510906880 PriorityBoostEnabled : True PrivateMemorySize64 : 4210688 PrivilegedProcessorTime : 00:00:00.0468750 ProcessName : RuntimeBroker ProcessorAffinity : 1048575 Responding : True SessionId : 1 StartInfo : System.Diagnostics.ProcessStartInfo StartTime : 2025/8/18 18:02:10 SynchronizingObject : Threads : {8308, 8404, 11804, 9580} UserProcessorTime : 00:00:00.0937500 VirtualMemorySize64 : 2203499425792 EnableRaisingEvents : False StandardInput : StandardOutput : StandardError : WorkingSet64 : 24907776 Site : Container : Name : RuntimeBroker Id : 8352 PriorityClass : Normal FileVersion : 10.0.22621.2506 (WinBuild.160101.0800) HandleCount : 493 WorkingSet : 34549760 PagedMemorySize : 8093696 PrivateMemorySize : 8093696 VirtualMemorySize : 202727424 TotalProcessorTime : 00:00:00.0312500 SI : 1 Handles : 493 VM : 2203520950272 WS : 34549760 PM : 8093696 NPM : 23048 Path : C:\Windows\System32\RuntimeBroker.exe Company : Microsoft Corporation CPU : 0.03125 ProductVersion : 10.0.22621.2506 Description : Runtime Broker Product : Microsoft® Windows® Operating System __NounName : Process BasePriority : 8 ExitCode : HasExited : False ExitTime : Handle : 2956 SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle MachineName : . MainWindowHandle : 0 MainWindowTitle : MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe) MaxWorkingSet : 1413120 MinWorkingSet : 204800 Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu le (KERNELBASE.dll)...} NonpagedSystemMemorySize : 23048 NonpagedSystemMemorySize64 : 23048 PagedMemorySize64 : 8093696 PagedSystemMemorySize : 289424 PagedSystemMemorySize64 : 289424 PeakPagedMemorySize : 10063872 PeakPagedMemorySize64 : 10063872 PeakWorkingSet : 38244352 PeakWorkingSet64 : 38244352 PeakVirtualMemorySize : 215470080 PeakVirtualMemorySize64 : 2203533692928 PriorityBoostEnabled : True PrivateMemorySize64 : 8093696 PrivilegedProcessorTime : 00:00:00.0312500 ProcessName : RuntimeBroker ProcessorAffinity : 1048575 Responding : True SessionId : 1 StartInfo : System.Diagnostics.ProcessStartInfo StartTime : 2025/8/18 18:02:10 SynchronizingObject : Threads : {8356, 8380, 8408, 9204...} UserProcessorTime : 00:00:00 VirtualMemorySize64 : 2203520950272 EnableRaisingEvents : False StandardInput : StandardOutput : StandardError : WorkingSet64 : 34549760 Site : Container : Name : RuntimeBroker Id : 13076 PriorityClass : Normal FileVersion : 10.0.22621.2506 (WinBuild.160101.0800) HandleCount : 152 WorkingSet : 11689984 PagedMemorySize : 2252800 PrivateMemorySize : 2252800 VirtualMemorySize : 105242624 TotalProcessorTime : 00:00:00 SI : 1 Handles : 152 VM : 2203423465472 WS : 11689984 PM : 2252800 NPM : 10328 Path : C:\Windows\System32\RuntimeBroker.exe Company : Microsoft Corporation CPU : 0 ProductVersion : 10.0.22621.2506 Description : Runtime Broker Product : Microsoft® Windows® Operating System __NounName : Process BasePriority : 8 ExitCode : HasExited : False ExitTime : Handle : 3336 SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle MachineName : . MainWindowHandle : 0 MainWindowTitle : MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe) MaxWorkingSet : 1413120 MinWorkingSet : 204800 Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu le (KERNELBASE.dll)...} NonpagedSystemMemorySize : 10328 NonpagedSystemMemorySize64 : 10328 PagedMemorySize64 : 2252800 PagedSystemMemorySize : 132464 PagedSystemMemorySize64 : 132464 PeakPagedMemorySize : 2789376 PeakPagedMemorySize64 : 2789376 PeakWorkingSet : 12361728 PeakWorkingSet64 : 12361728 PeakVirtualMemorySize : 111034368 PeakVirtualMemorySize64 : 2203429257216 PriorityBoostEnabled : True PrivateMemorySize64 : 2252800 PrivilegedProcessorTime : 00:00:00 ProcessName : RuntimeBroker ProcessorAffinity : 1048575 Responding : True SessionId : 1 StartInfo : System.Diagnostics.ProcessStartInfo StartTime : 2025/8/18 18:02:20 SynchronizingObject : Threads : {13080, 4860} UserProcessorTime : 00:00:00 VirtualMemorySize64 : 2203423465472 EnableRaisingEvents : False StandardInput : StandardOutput : StandardError : WorkingSet64 : 11689984 Site : Container : Name : RuntimeBroker Id : 13460 PriorityClass : Normal FileVersion : 10.0.22621.2506 (WinBuild.160101.0800) HandleCount : 266 WorkingSet : 24059904 PagedMemorySize : 5722112 PrivateMemorySize : 5722112 VirtualMemorySize : 174923776 TotalProcessorTime : 00:00:00.0312500 SI : 1 Handles : 266 VM : 2203493146624 WS : 24059904 PM : 5722112 NPM : 15224 Path : C:\Windows\System32\RuntimeBroker.exe Company : Microsoft Corporation CPU : 0.03125 ProductVersion : 10.0.22621.2506 Description : Runtime Broker Product : Microsoft® Windows® Operating System __NounName : Process BasePriority : 8 ExitCode : HasExited : False ExitTime : Handle : 4104 SafeHandle : Microsoft.Win32.SafeHandles.SafeProcessHandle MachineName : . MainWindowHandle : 0 MainWindowTitle : MainModule : System.Diagnostics.ProcessModule (RuntimeBroker.exe) MaxWorkingSet : 1413120 MinWorkingSet : 204800 Modules : {System.Diagnostics.ProcessModule (RuntimeBroker.exe), System.Diagnostics.ProcessModule (n tdll.dll), System.Diagnostics.ProcessModule (KERNEL32.DLL), System.Diagnostics.ProcessModu le (KERNELBASE.dll)...} NonpagedSystemMemorySize : 15224 NonpagedSystemMemorySize64 : 15224 PagedMemorySize64 : 5722112 PagedSystemMemorySize : 233896 PagedSystemMemorySize64 : 233896 PeakPagedMemorySize : 7180288 PeakPagedMemorySize64 : 7180288 PeakWorkingSet : 26804224 PeakWorkingSet64 : 26804224 PeakVirtualMemorySize : 196382720 PeakVirtualMemorySize64 : 2203514605568 PriorityBoostEnabled : True PrivateMemorySize64 : 5722112 PrivilegedProcessorTime : 00:00:00 ProcessName : RuntimeBroker ProcessorAffinity : 1048575 Responding : True SessionId : 1 StartInfo : System.Diagnostics.ProcessStartInfo StartTime : 2025/8/18 18:03:16 SynchronizingObject : Threads : {13476, 8600, 8212, 9608...} UserProcessorTime : 00:00:00.0312500 VirtualMemorySize64 : 2203493146624 EnableRaisingEvents : False StandardInput : StandardOutput : StandardError : WorkingSet64 : 24059904 Site : Container : PS C:\Users\Administrator> PS C:\Users\Administrator> # 查看关联事件(过滤事件ID 1074) PS C:\Users\Administrator> Get-WinEvent -FilterHashtable @{LogName='System';ID=1074} | >> Where-Object {$_.Message -match "RuntimeBroker"} | >> Select-Object TimeCreated, Message | Format-Table -Wrap >>
最新发布
08-19
评论
成就一亿技术人!
拼手气红包6.0元
还能输入1000个字符
 
红包 添加红包
表情包 插入表情
 条评论被折叠 查看
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值