On Fri, Oct 3, 2014 at 12:50 PM, Crawford, Scott <[email protected]> wrote:
> You need to escape the backslashes, like so: > > Get-WmiObject -Class win32_process -Filter > "ExecutablePath='c:\\windows\\system32\\calc.exe'" > AH. OK, I will try that. Thanks! > > -----Original Message----- > From: [email protected] [mailto: > [email protected]] On Behalf Of Michael Leone > Sent: Friday, October 3, 2014 11:25 AM > To: [email protected]; [email protected] > Subject: [powershell] Get-WmiObject question on filtering > > I want to try a Get-WmiObject that uses a Filter for executable path. > But it's failing. If I filter for just the name of the exe I want, it > works. And one of the properties returned is ExecutablePath > > ExecutablePath Property string ExecutablePath {get;set;} > > and that property gives me what I want: > > C:\Windows\system32\calc.exe > > So why can't I do this? > > PS C:\Windows\system32> $a=(Get-WmiObject -Class win32_process > -ComputerName "xxxx" -Filter > "ExecutablePath='C:\Windows\system32\calc.exe'") > $a > > Get-WmiObject : Invalid query "select * from win32_process where > ExecutablePath='C:\Windows\system32\calc.exe'" > At line:1 char:5 > + $a=(Get-WmiObject -Class win32_process -ComputerName "DCTRRDS003" > -Filter "Execu ... > + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > + ~~~~~~~~~~ > + CategoryInfo : InvalidArgument: (:) [Get-WmiObject], > ManagementException > + FullyQualifiedErrorId : > GetWMIManagementException,Microsoft.PowerShell.Commands.GetWmiObjectCommand > > > ================================================ > Did you know you can also post and find answers on PowerShell in the > forums? > http://www.myitforum.com/forums/default.asp?catApp=1 > >

