I don't like WMI. It's slow and it only works if the WMI-server can run.
I use this func in my security-app "ModHelper", here: http://www.autoitscript.com/forum/index.php?showtopic=84939
I need to be able to suspend processes so they can't get up to no good... WMI doesn't work if you suspend it...
It works on XP sp3 and Vista Home. Hope you will try on others. (pre NT will not work.)
(The structures involved are not publicly disclosed (?) by Microsoft, likely so they can chang