Ideally, it would be nice if one could run 'sadmin status' and it return a code indicating whether Solidcore is enabled or not.
Right now, I have to paw through it's output to figure that out.
We are doing this in a GUI application. Here is the scoop.
I wrote a vbscript to run the command and parse it's output. The vbscript returns 0 if all is well, 1 if application control
is not enabled, 2 if it is not installed, some other positive number for other problems.
When our gui app runs, it calls the script and displays a warning message if my script has a non-zero return code.
The problem is that a console window pops up while my script runs.
There are a couple of things:
My question is does it matter? When I double click 'sadmin.exe' from Windows Explorer, I notice a console briefly flashes. Are these other mitigations even going to matter?
My bigger question can I request a feature in which sadmin tells me it's status based on return code rather than parsing it's output?
Answered my own question.
If we use the Windows CreateProcess to launch my script as opposed to ::system, no command prompt appears if we set the right flag which is CREATE_NO_WINDOW.