The command: "tasklist" is on Windows 12, 11, 10, .. , MS Server 2025, 2022, 2019, .. available
The examples for the command "tasklist"
Here are examples of using the
`tasklist` command in Command Prompt:
Example 1: View all running processes:
tasklist
- This command prints a list of all running processes with information such as process name, process ID (PID), session number and memory usage.
Example 2: Filtering process information by process name:
tasklist /FI "IMAGENAME eq notepad.exe"
-
`/FI "IMAGENAME eq notepad.exe"`: This filter only displays information about the process named
"notepad.exe".
Example 3: Displaying advanced information about processes:
tasklist /V
-
`/V`: This parameter outputs extended information about processes, including username, window title and session number.
Example 4: Viewing processes on a remote computer:
tasklist /S remote computer /U username /P password
-
`/S Remote Computer`: The name or IP address of the remote computer.
-
`/U username`: The username for authentication on the remote computer.
-
`/P password`: The password for authentication on the remote computer.
Example 5: Filtering process information by username:
tasklist /FI "USERNAME eq username"
-
`/FI "USERNAME eq username"`: This filter only shows processes of the specified user.
Example 6: Displaying processes in a tree structure (hierarchy):
tasklist /V /FO TREE
-
`/V`: Extended information about processes.
-
`/FO TREE`: Displays the processes in a hierarchical tree structure.
These examples show various use cases for the
`tasklist` command in the Command Prompt. The command is useful for getting an overview of running processes and displaying detailed information about specific processes. Note that the
`tasklist` command can be run by default without administrative privileges to obtain information about processes in the current user context.
Example 7: Show specific columns in the output:
tasklist /FI "STATUS eq running" /FO TABLE /NH
-
`/FI "STATUS eq running"`: Filters processes by their status (in this case
"running").
-
`/FO TABLE`: Outputs the output in a tabular form.
-
`/NH`: Suppresses the header of the table.
Example 8: Display CPU information for processes:
tasklist /V /FI "MEMUSAGE gt 10000" /FI "CPUTIME gt 00:05:00"
-
`/V`: Extended information about processes.
-
`/FI "MEMUSAGE gt 10000"`: Filters processes with memory usage greater than 10,000 KB.
-
`/FI "CPUTIME gt 00:05:00"`: Filters processes with a CPU time greater than 5 minutes.
Example 9: Show process information to all users:
tasklist /V /FO CSV
-
`/V`: Extended information about processes.
-
`/FO CSV`: Outputs the output in CSV format.
Example 10: View processes and export output to a file:
tasklist /V > processlist.txt
-
`/V`: Extended information about processes.
-
`>ProcessList.txt`: Pipes the output to a text file named
"ProcessList.txt".
Example 11: View processes and sort output by CPU usage:
tasklist /V /FO TABLE /NH | sort /+60
-
`/V`: Extended information about processes.
-
`/FO TABLE`: Outputs the output in a tabular form.
-
`/NH`: Suppresses the header of the table.
-
`| sort /+60`: Sorts the output by the sixth column (CPU usage).
These examples show various ways the
`tasklist` command can be used to extract and display specific information about processes. You can customize the filter options and formatting options depending on your needs.
"tasklist" Excerpt from Microsoft Windows Help
Microsoft Windows [Version 10.0.19045.3693]
(c) Copyright 1985-2023 Microsoft Corp.
C:\\WINDOWS>
TASKLIST [/S system [/U username [/P [password]]]]
[/M [module] | /SVC | /V] [/FI filter] [/FO format] [/NH]
Description:
This command line tool displays a list of application(s) and
associated task(s)/process(es) currently running on either a local or
remote system.
Parameter List:
/S system Specifies the remote system to connect to.
/U [domain\]user Specifies the user context under which
the command should execute.
/P [password] Specifies the password for the given
user context. Prompts for input if omitted.
/M [module] Lists all tasks that have DLL modules loaded
in them that match the given pattern name.
If the module name is not specified,
displays all modules loaded by each task.
/SVC Displays services in each process.
/V Specifies that the verbose information
is to be displayed.
/FI filter Displays a set of tasks that match a
given criteria specified by the filter.
/FO format Specifies the output format.
Valid values: "TABLE", "LIST", "CSV".
/NH Specifies that the "Column Header" should
not be displayed in the output.
Valid only for "TABLE" and "CSV" formats.
/? Displays this help/usage.
Filters:
Filter Name Valid Operators Valid Value(s)
----------- --------------- --------------
STATUS eq, ne RUNNING | NOT RESPONDING
IMAGENAME eq, ne Image name
PID eq, ne, gt, lt, ge, le PID value
SESSION eq, ne, gt, lt, ge, le Session number
SESSIONNAME eq, ne Session name
CPUTIME eq, ne, gt, lt, ge, le CPU time in the format
of hh:mm:ss.
hh - hours,
mm - minutes, ss - seconds
MEMUSAGE eq, ne, gt, lt, ge, le Memory usage in KB
USERNAME eq, ne User name in [domain\]user
format
SERVICES eq, ne Service name
WINDOWTITLE eq, ne Window title
MODULES eq, ne DLL name
Examples:
TASKLIST
TASKLIST /M
TASKLIST /V
TASKLIST /SVC
TASKLIST /M wbem*
TASKLIST /S system /FO LIST
TASKLIST /S system /U domain\username /FO CSV /NH
TASKLIST /S system /U username /P password /FO TABLE /NH
TASKLIST /FI "USERNAME ne NT AUTHORITY\SYSTEM" /FI "STATUS eq running"
Important information, tips for the "tasklist" command
Yes, there are many other ways to manage and monitor processes on Windows. Here are some additional approaches:
1.
Task Manager:
- Task Manager (accessible by
`Ctrl + Shift + Esc` or
`Ctrl + Alt + Del` and selecting
"Task Manager") provides an easy-to-use graphical user interface for monitoring and managing processes.
2.
PowerShell:
- PowerShell provides comprehensive process management features. For example:
Get Process
Stop Process -Name notepad
3.
Performance Monitor:
- Performance Monitor (
`perfmon`) allows monitoring system performance, including process and memory statistics.
4.
Process Explorer (Sysinternals):
- Process Explorer is an advanced tool from Sysinternals that provides detailed information about running processes, services, open files and much more.
5.
Windows Management Instrumentation (WMI):
- WMI enables management of Windows resources, including process monitoring and control. PowerShell scripts can be used to access WMI.
6.
Task Scheduling:
- Task scheduling can be used to run programs or scripts based on schedules or events. This can be used to automatically execute process management tasks.
7.
AutoHotKey:
- AutoHotKey is a scripting tool that allows automation of mouse and keyboard input and control of applications.
8.
Control Panel - Administrative Tools - Computer Management:
- Computer management offers a variety of tools to manage processes, users, services and more.
9.
Remote Desktop Services Manager:
- If you work on a server, Remote Desktop Services Manager allows you to monitor and terminate user sessions.
10.
Resource Monitor:
- Resource monitor (
`resmon`) provides detailed information about resource usage, including processes, network activity and disk activity.
11.
PsList (Sysinternals):
- PsList, part of the Sysinternals Suite, outputs information about running processes and provides advanced output formatting options.
12.
Remote Procedure Call (RPC):
- Advanced users can use RPC to control processes on a remote computer.
These options provide a wide range of tools and methods for managing processes on Windows. Depending on your specific needs and the level of detail you want, you can choose the tool or method that works best. However, always pay attention to the required permissions and possible effects on the system.
