ICT-Hotlist Topic

C:\Windows\system32>OpenFiles /query

INFO: The system global flag 'maintain objects list' needs
      to be enabled to see local opened files.
      See OpenFiles /? for more information.


Files opened remotely via local share points:
---------------------------------------------

ID       Accessed By          Type       Open File (Path\executable)
======== ==================== ========== ====================================
57       johan                Windows    C:\Users\
65       johan                Windows    C:\Book\
128      johan                Windows    C:\Book\ReBaUp_Manual.pdf
 

OpenFiles /Disconnect [/S system [/U username [/P [password]]]]
                      {[/ID id] [/A accessedby] [/O openmode]}
                      [/OP openfile]

Description:
    Enables an administrator to disconnect files and folders that
    have been opened remotely through a shared folder.

Parameter List:
    /S     system         Specifies the remote system to connect to.

    /U     [domain\]user  Specifies the user context under which the
                          command should execute.

    /P     [password]     Specifies the password for the given user
                          context.

    /ID    id             Specifies to disconnect open files by file ID.
                          The "*" wildcard may be used.

    /A     accessedby     Specifies to disconnect all open files by
                          "accessedby" value. The "*" wildcard
                          may be used.

    /O     openmode       Specifies to disconnect all open files by
                          "openmode" value. Valid values are Read,
                          Write or Read/Write. The "*" wildcard
                          may be used.

    /OP    openfile       Specifies to disconnect all open file
                          connections created by a specific "open
                          file" name. The "*" wildcard may be used.

    /?                    Displays this help message.

Examples:
    OpenFiles /Disconnect /?
    OpenFiles /Disconnect /ID 1
    OpenFiles /Disconnect /A  username
    OpenFiles /Disconnect /O Read/Write
    OpenFiles /Disconnect /OP "c:\My Documents\somedoc.doc" /ID 234
    OpenFiles /Disconnect /S system  /U username /ID 5
    OpenFiles /Disconnect /S system  /U username /P password /ID *