Glossary of terms used on this site

Search for glossary terms (regular expression allowed)
Begin with Contains Exact term


Term Definition


Take ownership of a file (Windows 2003/7/2008).



End one or more processes (by process id or image name).



TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.

Syntax Tasklist optionsOptions: /s computer Name or IP address of a remote computer. Don’t use backslashes. Default = local computer. /u domain\user [/p password]] Run under a different account. /P [password] The password for the given user context. Prompts for input if omitted. /M [module] List all tasks currently using the given exe/dll name. If the module name is not specified all loaded modules are displayed. /svc List information for each process without truncation. Valid when /fo=TABLE. Cannot be used with /m or /v /APPS Display Store Apps and their associated processes. (Windows 8.1+) /V Verbose task information. /FO {TABLE|LIST|CSV}] Output format, the default is TABLE. /NH No Headers in the output (does not apply to LIST output) /FI FilterName [/FI FilterName2 [ ... ]] Apply one of the Filters below: ImageName eq, ne Image Name String PID eq, ne, gt, lt, ge, le Process ID, A Positive integer. Session eq, ne, gt, lt, ge, le Any valid session number. SessionName eq, ne String Status eq, ne RUNNING | NOT RESPONDING | UNKNOWN CPUTime eq, ne, gt, lt, ge, le Time hh:mm:ss MemUsage eq, ne, gt, lt, ge, le Memory usage in KB, specify a valid integer. Username eq, ne User name ([Domain\]User). Services eq, ne Service Name String Windowtitle eq, ne Window Title String Modules eq, ne DLL Name String

Image Name is the name of the process or the executable file running the process, often svchost.exe

Filters must be surrounded with double quotation marks, if a filter string itself includes a double quotation mark, this must be escaped with a backslash \" one exception to this is a double quote at the end, which can be matched using a wildcard: *

if a filter string includes a backslash, that can be escaped with a double backslash \\

Home editions of Windows do not have TASKLIST, use QPROCESS instead.


List the services running under each process:


List the services running under each SvcHost process:

TASKLIST /FI "imagename eq svchost.exe" /svc

List the services running now:

TASKLIST /v /fi "STATUS eq running"

List the services with an ImageName that starts with "C" - notice that a wildcard can only be used at the end of the string:


List the services running under a specific user account:

TASKLIST /v /fi "username eq SERVICE_ACCT05"

“Here's to the success of our impossible task!” ~ Soviet dissidents, 1975


Query Process - Display processes (TS/Remote Desktop)
PsList - List detailed information about processes
TLIST - Task list with full path
PSTAT - display running tasks including all Process Threads.
MEM - Display memory usage
WINMSD - Windows NT Diagnostics (including Physical Memory)
WMIC /OUTPUT:C:\Procs.txt PROCESS get Caption,Commandline,Processid
Powershell: Get-Process - Get a list of processes on a machine (ps/gps)
Equivalent bash command (Linux): ps - Process status, information about processes running in memory.



TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.



Communicate with another host using the TELNET protocol.



Display or set the system time.


TIMEOUT.exe (Windows 7/2008 and XP Resource Kit)

Delay execution for a few seconds or minutes, for use within a batch file.



Change the title displayed above the CMD window.


TLIST (Resource Kit & Windows 2000 support tools)

Task List.

Show the command, command line, working directory, memory usage and DLLs for each running task. This command is no longer supplied with recent versions of the Windows resource kit, having been replaced by TASKLIST, however if you can find a copy Tlist does have the advantage of showing the full path of the process.


TOUCH (Windows 2000 Resource Kit)

Change file timestamps



Trace Route - Find the IP address of any remote host. TRACERT is useful for troubleshooting large networks where several paths can be taken to arrive at the same point, or where many intermediate systems (routers or bridges) are involved.


Display the folder structure of a drive or path as a graphical tree.



Disconnect a Remote Desktop Session.



End a process running in a session on a Remote Desktop Session Host (RD Session Host) server..

Tskill can be used to end any process that belongs to you, unless you are an administrator. Administrators have full access to all tskill functions and can end processes that are running in other user sessions.