Windows

10 Sysinternals tools you shouldn't be without

#1 PsList and PsKill

I listed these together because I typically use them in that order. The goal here is to see processes on a machine--with PsList, I find the process ID, and then use PsKill to terminate said process.

As you can see here, there are quite a few ways to return information with PSList and the best part is the fact that it works on local and remote machines. PSKill works similarly to PSList except it is used to terminate processes by process ID.

For more details on this and the following tools, see the original blog posts, "Five favorite Sysinternals tools and what they do" (first five tools) and "Learn about some Sysinternals tools that might be flying under the radar" (second five).

About

Derek Schauland has been tinkering with Windows systems since 1997. He has supported Windows NT 4, worked phone support for an ISP, and is currently the IT Manager for a manufacturing company in Wisconsin.

6 comments
AlexNet0
AlexNet0

On the Process Explorer section. "The utility has two panes of information, the top pane *shoes*" (shows) "currently active processes on your system and includes information about the name"

gpachello
gpachello

Very usefull tool for remote command execution. It allows @file where you can put a list of machines to excute the same command on all machines. Regards. G.D.P.

Craig_B
Craig_B

I think all the Sysinternals tools are great and I have a little batch file to keep my local copy up to date. rem Copy New sysinternals tools net use t: \\live.sysinternals.com\tools robocopy t:\ c:\Utils /e /r:2 /w:5 /np /xo net use t: /delete

ehula
ehula

I recognize SysInternals from Process Explorer, but didn't know about ZoomIt. That is a neat little program. I plan on using it tomorrow for a presentation on a new process.

hrosita
hrosita

I have a stubborn file that will not delete while the system is running. I love your solution of Movefile.

iShango
iShango

Thanks for that. I like small simple amd smart. This is all three.