I am trying to come up with a way to id how a kix script was started (kix32.exe's parent process).

I have found the program ptree, but it seems that ptree will only work for win2k, and i need a Win2k/NT solution.

One cool thing about ptree is that it adds COM support.

here is what i have found so far using ptree.

a kix32 script launched during logon will have a process thread like the following.

quote:

---

system > smss > winlogon > userinit.exe > cmd > kix32

---

a user launched kix script will be like this.

quote:

---

system > smss > winlogon > userinit.exe > explorer > ....

---

I would like to find a solution that would give me this information for both NT and win2k.

Thanks
Bryce