Skip to main content

Windows Sysinternals Administrator's Reference

By Mark Russinovich and Aaron Margosis

Book cover: Windows Sysinternals Administrator's ReferenceThe Windows Sysinternals Administrator's Reference is the official book on the Sysinternals tools, written by tool author and Sysinternals cofounder Mark Russinovich, and Windows expert Aaron Margosis. The book covers all 70+ tools in detail, with full chapters on the major tools like Process Explorer and Autoruns. In addition to tips and tricks in the tool chapters, it includes 17 "Case of the Unexplained…" examples of the tools used by users to solve real-world problems. Buy the book today and take your Windows troubleshooting and systems management skills to the next level.

Ordering the Book

The book is available for purchase on and available from O'Reilly in 4 ebook formats, or you can read it online through Safari.

Description of the Book

Get an edge on Windows diagnostics and support—direct from the Sysinternals experts at Microsoft. The Windows Sysinternals tools, available for download from Microsoft TechNet, are designed to help you manage, troubleshoot, and diagnose Windows clients and servers. This Administrator’s Reference provides essential, scenario-based guidance and inside insights to help maximize your work with these tools.

  • Get timesaving solutions, workarounds, and troubleshooting tips from Windows internals expert Marc Russinovich and senior MCS consultant Aaron Margosis
  • Drill into the features and functions of Sysinternals utilities and references, gleaning practical, hands-on insights for resolving real-world issues
  • Learn to work more effectively with utilities for managing, troubleshooting, and optimizing files, disks, processes, security features, networking, maintenance, and other essential operations

Sample Chapter

You can read samples from the book at this link on

Table of Contents

Getting Started

  1. Getting Started with the Sysinternals Utilities
  2. Windows Core Concepts

User Guide

  1. Process Explorer
  2. Process Monitor
  3. Autoruns
  4. PsTools
  5. Process and Diagnostic Utilities
  6. Security Utilities
  7. Active Directory Utilities
  8. Desktop Utilities
  9. File Utilities
  10. Disk Utilities
  11. Network and Communication Utilities
  12. System Information Utilities
  13. Miscellaneous Utilities

Troubleshooting—“The Case of the Unexplained...”

  1. Error Messages
  2. Hangs and Sluggish Performance
  3. Malware


There are no errata at this time.

Top of page   Top of page


Ordering the Book

The book is available for purchase on and available from O'Reilly in 4 ebook formats, or you can read it online through Safari.

Related Content

Sysinternals tools featured on the Defrag Tools show:

Microsoft führt eine Onlineumfrage durch, um Ihre Meinung zur -Website zu erfahren. Wenn Sie sich zur Teilnahme entscheiden, wird Ihnen die Onlineumfrage angezeigt, sobald Sie die -Website verlassen.

Möchten Sie teilnehmen?