Where is the File: Using Where.exe
There used to be a time where you ran commands on your computer without any fancy GUIs or icons. You typed a command and it ran. In order to simplify your life, you didn’t even have to specify the full path to the program. The operating system would search in predefined set of directories and run the first matching command. These directories were stored in an environmental variable called %PATH%.
Today, most IT Pros don’t think too much about this, nor do they when using Windows. But for those of you who run commands from a command prompt, sometimes you can run into problems. This is a two-part article: Today I’ll discuss using the command line utility Where.exe. In part two, I’ll go further and discuss using Get-FileItem to help you find the files you want.
For example, if you want to run foo.exe but there are two different versions in two different folders in %PATH%, you might end up running the wrong version. If you open a command prompt in Windows 7, you have at your disposal a nifty command line utility called Where.exe. To see how to use it, run where /? at a prompt. You can see the results in Figure 1.
Figure 1 Where.exe help
C:\>where notepad.* C:\Windows\System32\notepad.exe C:\Windows\notepad.exe
The default behavior is to display the full file name for every match. Remember, by default, Where.exe is only searching folders in %PATH%. But you can specify one or more directories.
C:\>where "c:\scripts;c:\work:note*" c:\scripts\notepad.exe c:\work\note1.xml c:\work\noteeverything.txt
In this command, I searched for anything that started with ‘Note’ in C:\Scripts and C:\Work. If I also wanted to search %PATH%, all I need to do is include it in my directory definition.
C:\>where "%path%;c:\scripts;c:\work:note*" C:\Windows\System32\notepad.exe C:\Windows\notepad.exe c:\scripts\notepad.exe c:\work\note1.xml c:\work\noteeverything.txt
Using /T & /R Parameters
Where you might have duplicates, it can be helpful to check size and/or a time stamp. You can accomplish that with the /T parameter.
C:\>where "%path%;c:\scripts;c:\work:notepad*" /t 193536 7/13/2009 9:39:25 PM C:\Windows\System32\notepad.exe 193536 7/13/2009 9:39:25 PM C:\Windows\notepad.exe 2938 6/25/2012 2:23:57 PM c:\scripts\notepad.exe
It looks like the first two versions are identical, but clearly the last one is different.
By default, WHERE.EXE only searches in the root of the current directory, but you can do a recursive search, albeit only for a single directory with /R.
C:\>where /R c:\windows notepad* c:\Windows\notepad.exe c:\Windows\en-US\notepad.exe.mui c:\Windows\System32\notepad.exe c:\Windows\System32\en-US\notepad.exe.mui c:\Windows\SysWOW64\notepad.exe c:\Windows\SysWOW64\en-US\notepad.exe.mui …
I’ve truncated the output, but I think you get the idea. Of course, you can combine parameters as well.
C:\>where /R c:\windows notepad* /t 193536 7/13/2009 9:39:25 PM c:\Windows\notepad.exe 12288 7/13/2009 10:30:22 PM c:\Windows\en-US\notepad.exe.mui 193536 7/13/2009 9:39:25 PM c:\Windows\System32\notepad.exe 12288 7/13/2009 10:30:22 PM c:\Windows\System32\en-US\notepad.exe.mui …
One caveat is that you must put the parameters in the same order that you see them in help.
Finally, you may also want to use WHERE.EXE to determine if a file exists somewhere either in the path or a specified computer. You don’t really need the file name. If a match is made, the command will return Errorlevel 0.
C:\>where calc.exe /q C:\>echo %errorlevel% 0
This comes in handy if you are writing a batch file script.
@echo off where %1 /q if %errorlevel% EQU 0 ( echo OK ) else ( echo NOTOK )
Here’s what it looks like in action.
C:\>c:\work\testfile.bat calc.exe OK C:\>c:\work\testfile.bat foo.exe NOTOK
Running Files with Where.exe
Lastly, if you wanted to use this command to actually run the files WHERE.EXE finds, you’ll need to be creative. The technique I have works best if you know you’ll only get a single result. First, save the result to a temporary text file.
C:\>where calc.exe > %temp%\mycmd.txt
Next, create a variable from the text file contents.
C:\>set /p mycmd= < %temp%\mycmd.txt
Finally, invoke the variable, which should launch the program.
If your command has spaces in it, you’ll need to have WHERE.EXE include double quotes with the /F parameter.
C:\>where /r "c:\program files" winword.exe /f > %temp%\mycmd.txt C:\>set /p mycmd= < %temp%\mycmd.txt C:\>%mycmd%
That’s a lot of work. For a quick file search, WHERE.EXE is terrific. But if you want to do anything else with it, you run into shortcomings of the command shell.
In Part 2, I’ll show you a command line alternative to help you find the files you’re looking for.
More in Windows Server
Microsoft Releases Out-Of-Band Patches to Fix Windows AD Authentication Issues
May 20, 2022 | Rabia Noureen
CISA Warns Windows Admins Against Applying May Patch Tuesday Updates on Domain Controllers
May 17, 2022 | Rabia Noureen
Microsoft Confirms May 2022 Patch Tuesday Updates Cause AD Authentication Issues
May 12, 2022 | Rabia Noureen
Microsoft to Disable SMB1 File-Sharing Protocol By Default on Windows 11
Apr 20, 2022 | Rabia Noureen
Microsoft Defender for Endpoint Adds Support for Windows Server 2012 R2 and 2016
Apr 14, 2022 | Rabia Noureen
Microsoft Lets Windows Server Admins Opt-In for Automatic .NET Updates
Apr 13, 2022 | Rabia Noureen
Most popular on petri