The Case of the Unexpected PsList Error

re: The Case of the Unexpected PsList Error

Kenny Kerr — Mon, 09 Jul 2007 17:50:52 GMT

Thanks Mark, I was hoping this would be corrected soon.

re: The Case of the Unexpected PsList Error

ac — Mon, 09 Jul 2007 20:10:34 GMT

Why use the perf stuff over whatever taskmgr and process explorer uses?

re: The Case of the Unexpected PsList Error

isablog — Mon, 09 Jul 2007 22:39:04 GMT

Is this why TCPView doesn't list process name and icons anymore?

re: The Case of the Unexpected PsList Error

Travis — Wed, 11 Jul 2007 17:01:55 GMT

Why did some of the other comments (including one from Mark) disappear from this post?

re: The Case of the Unexpected PsList Error

Souplounite — Wed, 11 Jul 2007 22:18:30 GMT

So what about the unresponsive process that leads you to launch PsList in the first place ?

I'd like to know how you handle a process consuming CPU, because it happens from time to time and i'd be glad to learn from you.

Thanks anyway.

re: The Case of the Unexpected PsList Error

nick — Thu, 12 Jul 2007 04:53:30 GMT

Nice job. mark.

I love your posts in this blog.

re: The Case of the Unexpected PsList Error

decoder — Thu, 12 Jul 2007 16:31:42 GMT

Great Article. Very useful.

However, it would be possible for my c++ application to gain read access to the PerfLib key? (having access to HKEY_PERFORMANCE_DATA key without adding manually the Interactive Group to the PerfLib’s permissions).

re: The Case of the Unexpected PsList Error

adam — Fri, 13 Jul 2007 01:13:15 GMT

Thats a very good point Souplounite maybe that will be the next blog entry.

You wouldn't have access to the key decoder you would have to load the performance dll's in your application using LoadLibrary() and then using GetProcAddress() on the on the functions you would want to use. It would be easier just to alter the permission.

nice work mark the sysinternals tools are invaluable to any sys admin/developer. Also I seen some debate on how they are packaged and I love the small single exe! installer pffff.

re: The Case of the Unexpected PsList Error

Steve — Sat, 14 Jul 2007 07:41:47 GMT

hmmmm when ever i hear the words "Windows Vista" i cringe.

- Steve

re: The Case of the Unexpected PsList Error

Jim — Tue, 17 Jul 2007 14:17:18 GMT

pslist under vista...

If I run in a cmd.exe that has been run as administrator, this works fine. pskill similarly. Aren't there processes that the user launched that the user should be able to see and kill? isn't this just a security bug in windows?

re: The Case of the Unexpected PsList Error

ASB — Wed, 25 Jul 2007 05:51:11 GMT

Ah, thanks for that...

I noticed that as soon as I migrated to Vista, but couldn't figure out why the change was done. Didn't seem to have the necessary security impact...

Glad this will be resolved shortly.

re: The Case of the Unexpected PsList Error

Steve Steiner — Sun, 05 Aug 2007 22:32:10 GMT

FYI - I had a surprisingly tough time refinding your blog.

The bookmark I had for your blog is now a dead link:

http://www.microsoft.com/technet/sysinternals/Blog/

Shouldn't a redirect to the current location have been maintained?

re: The Case of the Unexpected PsList Error

Andria — Mon, 06 Aug 2007 08:32:22 GMT

Thank you very much for sharing your thoughts. It is always great pleasure to read your posts.

re: The Case of the Unexpected PsList Error

Steve the Chairman — Thu, 20 Sep 2007 21:42:05 GMT

The same thing occurs on Server 2003, it appears. I am running a standalone 2K3 machine, and pslist.exe gives the same "Failed to take process snapshot on %computername%" when run in a remote desktop session as a user. It works when run under an administrative account, and the same workaround you supply above has solved the issue for my user account.

re: The Case of the Unexpected PsList Error

yksoft1 — Sun, 30 Sep 2007 15:47:32 GMT

So,

I deleted the MMCSS service (sc delete MMCSS) just for test, but how do I re-create it? can you make a .reg file including info of this service?

re: The Case of the Unexpected PsList Error

Dave Nedved — Thu, 07 Aug 2008 17:33:54 GMT

Hi Mark,

Just a quick one to inform you that i have got an online version of your fabulous process list tool running over at:

http://w3dt.net/tools/pslist/

feel free to contact me (dnedved [at] gmail [dot] com) if you have any comments/suggestions. cheers.

re: The Case of the Unexpected PsList Error

Antoine Levy-Lambert — Wed, 15 Apr 2009 17:05:06 GMT

Hello Mark,

I like very much your tools. Would it be possible to add a command line switch to pslist making pslist display the full command line instead of just the name of the running program ?

Regards,

Antoine

A similar question about perflib in Windows 2008

Ben — Fri, 28 Aug 2009 16:15:45 GMT

Hi Mark,

I am also facing to similar question about perflib in my test program. However, I haven't got the answer from Microsoft, I also used your tool "Process Monitor" but could not find any hints. Could you help me?

My environment is Windows 2008 Enterprise SP2. My code is very simple, just get the content of perflib\Counter and re-write back to it.

It runs well in getting the content, but when it re-writes back, it reports that registry key handle is bad.

My program works well in Windows 2000/2003.

I also tried to modify the permission of perflib in registry, it does not work either.

Regards,

Ben