svchost startup parameters

[tsdragon]

As part of a security audit of our existing servers, I'm looking at the services that are running on each. Of couse, many of those services use svchost.exe to start, but none of the tools I've found so far can tell me any more than which dll is loaded by svchost. What I'd like to be able to find out is the FULL command line, i.e. what parameters were passed along with the dll name to svchost. Is there any way to determine that information?

Tracy Dryden

Meddle not in the affairs of dragons,
For you are crunchy, and good with mustard.

 

[TechyMcSe2k]

prcview works well, and microsoft has one too but i can't think of it off the top of my head

http://www.softpedia.com/get/System/System-Info/PrcView.shtml

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!

 

[tsdragon]

Thanks, prcview does appear to show the information I need, at least on my machine. Now I just need to try it out on the servers...

Tracy Dryden

Meddle not in the affairs of dragons,
For you are crunchy, and good with mustard.