第一步: Tasklist/SVC 列出所有进程,系统服务及其对应的PID值!
而终端所对应的服务名为:TermService
第二步:用netstat -ano命令,列出所有端口对应的PID值!
找到PID值所对应的端口
1.通用方法
regedit /e c:\3389.reg "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"
type c:\3389.reg | find "PortNumber"
del c:\3389.reg
2.xp和2003下
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"
3.脚本
echo Dim ReadComputerName > c:\3389.vbs
echo Set ReadComputerName=WScript.CreateObject(^"WScript.Shell^") >> c:\3389.vbs
echo Dim TSName,TSRegPath >> c:\3389.vbs
echo TSRegPath=^"HKLM\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber^" >> c:\3389.vbs
echo TSName=ReadComputerName.RegRead(TSRegPath) >> c:\3389.vbs
echo WScript.Echo(^"Termservice Port:^"^&TSName) >> c:\3389.vbs
cscript 3389.vbs
C:\>tasklist /svc |find “TermService”
svchost.exe 1300 TermService
C:\>netstat -ano |find “1300″
TCP 0.0.0.0:61321 0.0.0.0:0 LISTENING 1300
TCP 210.72.225.74:61321 123.114.166.67:1697 ESTABLISHED 1300