Enumerating Additional Process Properties

  • Article

Microsoft® Windows® 2000 Scripting Guide

In addition to basic process properties such as executable path name and working set size, WMI scripts can retrieve additional properties for each process. These additional properties include such things as:

  • Information about the process owner (the account name under which the process is running).

  • Information about each thread in the process.

Although rarely needed for routine monitoring, these properties can be useful in diagnosing problems. Monitoring each thread in a process can help verify that an application is leaking memory. Knowing who owns a process tells you who is running an application on a computer. This information can also be useful when helping remote users terminate processes. Users can terminate only those processes that run under their user account; if a user is unable to stop a process on his or her computer, it might be because the process is running under a different account.