I'd say that the below is an argument for doing things a different way, rather than an answer to my question :)
However, for whatever reason, James appears to have a requirement/preference, not to use a built-in Windows executable a proxy. But it all might be moot: going back to a previous post by James: The idea is, if I can use a bit of PS code (or VB or JS) which is native to EM, I can drop this empty executable on any endpoint and create a shortcut to it which then allows me to leverage the exact Process Started trigger. So I know when a user has initiated a request for the precise set of Actions, without having to adjust my application control rules and/or deal with the interface of the application itself. I'm not sure the code needs to be compiled on the end-point. All he needs is an executable to run on the end-point. It can be compiled anywhere and merely copied to the end-point. Thus, writing a simple executable in .NET seems to be reasonable, as there isn't a need to determine the path to the .NET compiler at run-time - just at the initial build-time. As far as run-time is concerned, the end-point presumably also has .NET installed if PoSH is going to be used. Chees Ken From: [email protected] [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Monday, 21 October 2013 10:38 AM To: [email protected] Subject: RE: [NTSysADM] More PowerShell The short answer is that those executables are not in the standard Path. The proper path is version specific. Putting in the logic to check for that is longer than just accessing the common assemblies across versions. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Ken Schaefer Sent: Friday, October 18, 2013 7:05 PM To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] More PowerShell Why can't you call vbc.exe or csc.exe (command line VB.NET / C#.NET compilers)? Then you'd just need a VB.NET or C# source file that just does a Sleep in the Main() function and exits. Cheers Ken From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Rankin, James R Sent: Saturday, 19 October 2013 3:27 AM To: [email protected]<mailto:[email protected]> Subject: Re: [NTSysADM] More PowerShell Not sure of the exact terminology required....basically uses some .Net functions to create an executable, in the example I have. I can run the script as System, so it functions OK with the privilege required. Cheers, JR Sent from my BlackBerry, which may make me an antiques dealer, but it's reliable as hell for email delivery :-) ________________________________ From: "Michael B. Smith" <[email protected]<mailto:[email protected]>> Sender: [email protected]<mailto:[email protected]> Date: Fri, 18 Oct 2013 16:23:29 +0000 To: [email protected]<[email protected]<mailto:[email protected]%[email protected]>> ReplyTo: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] More PowerShell So you don't actually mean "compiles an executable". You mean "compiles a source file into an executable". Is that correct? You are aware that placing the executable in %ProgramFiles% is a high privilege operation? From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of James Rankin Sent: Friday, October 18, 2013 9:35 AM To: [email protected]<mailto:[email protected]> Subject: Re: [NTSysADM] More PowerShell Just to redefine, then... I am looking for a script (PowerShell, VB or JScript will do) that creates an executable in a specified place. The compiled executable code does nothing but pauses for a second or two and then closes. The one I currently have does this:- Compiles an executable that will run for a couple of seconds then exit Creates the executable file called xxx.exe in %ProgramFiles%\xxx This is all I actually need it to do - I am using it as a kind of user-defined trigger for other actions. On 18 October 2013 14:32, Michael B. Smith <[email protected]<mailto:[email protected]>> wrote: I'm wondering if I also misunderstood. Would you say more? Sent from my Windows Phone ________________________________ From: Manuel Santos<mailto:[email protected]> Sent: 10/18/2013 9:29 AM To: [email protected]<mailto:[email protected]> Subject: Re: [NTSysADM] More PowerShell Hi James. I am not quite sure on what you want. Can you please PM me, as I might have a solution for you. Thanks 2013/10/18 James Rankin <[email protected]<mailto:[email protected]>> Hmmm, bummer. I thought I was just getting hit by a lot of Google-chaff because every link I could find simply talks about creating an executable from a PS script, which is obviously not what I want. Rather frustrating when you know it's possible because I've got code that works but can't use it :-( On 18 October 2013 14:02, Michael B. Smith <[email protected]<mailto:[email protected]>> wrote: I've got 3 different ways of doing this, all work for hire (which means it can't be shared). I don't know of anyone that did this and placed it in the public domain. If you find one, let me know too. :) From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of James Rankin Sent: Friday, October 18, 2013 7:09 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] More PowerShell A guy I knew once gave me a bit of PowerShell which would compile an executable on an endpoint. The executable did nothing except run for a couple of seconds and then exit, which was exactly what I needed. Unfortunately I am now putting together a blog post which utilizes this handy function but the guy who wrote it is unwilling for me to use his code, even with a credit. So I thought I'd Google about and try and find my own way of doing it.....but I can't find anything I can make head or tail of. Can anyone point me in the direction of some PS that can do this sort of thing, so I can put together my own bit of code for the blog post? Cheers, -- James Rankin Technical Consultant (ACA, CCA, MCTS) http://appsensebigot.blogspot.co.uk -- James Rankin Technical Consultant (ACA, CCA, MCTS) http://appsensebigot.blogspot.co.uk -- James Rankin Technical Consultant (ACA, CCA, MCTS) http://appsensebigot.blogspot.co.uk

