Get-childitem certstore as SYSTEM RRS feed

  • Question

  • We have a script on our servers that checks all certificates in the stores Localmachine\My & Localmachine\Webhosting. We check if the internal cert. are no less than 30 days old & external (SSL) certs. are no less than 90 days old.

    The check runs fine on Server 2008(r2), 2012(r2)

    On Server 2016 the same script takes about 30 seconds to run. Digging into the script: the command (Get-ChildItem | select Thumbprint,FriendlyName,Notafter,Subject,Issuer) takes about 4 seconds to finish.

    We run the script with the (Local) SYSTEM account via nsclient++. 

    Any ideas why running the command as SYSTEM takes 4 seconds while running as any other admin the command takes about 11 miliseconds?

    • Edited by BernardBrinkOGN Monday, January 21, 2019 1:04 PM nagios -> nsclient
    • Moved by Bill_Stewart Friday, March 15, 2019 6:15 PM This is not third-party support forum
    Monday, January 21, 2019 1:03 PM

All replies

  • first guess:  The SYSTEM account is the busiest account in the system. 


    Monday, January 21, 2019 5:34 PM