Task Manager is the de facto tool for viewing a server's utilization. Rick Vanover explains why he views kernel times in Task Manager.
I use Task Manager all the time when logged onto servers to view what is going on. I look at network percentage utilization, processor utilization, and memory resource utilization, and I see what processes (executables) are active.One thing that I've always done is to show the kernel times in the Task Manager view. You can do this by going to the Performance tab, selecting the View menu, and then showing kernel times. Once kernel times are displayed, a red line appears representing the kernel mode applications. Figure A shows a Windows Server running Task Manager with kernel times. Figure A
In Figure A, the spikes in activity were caused by user activity on the console. There are backend processes that interact with the console applications, but the key is that there is separation between the kernel time (red) and user time (green).When kernel or privileged mode processes are consuming processor resources on the server, the separation between the two is reduced. Figure B shows a kernel mode process consuming resources. Figure B
With kernel time displayed, you can determine if there is too much activity on the server attributed to your (or another administrator's) session. If I am running administrative tools locally, I may determine that I'm taking too much of the user processor resources. The most egregious example is when the CPU is pegged at 100%. If the kernel time is at the high mark, the server is busy doing server functions; if there is kernel and user separation, it is clear that the administrative session is taking too much server processor resources.
The kernel time display is a valid configuration on all versions of Windows. Go to TechNet for more information about Task Manager.
If you use kernel times, let us know how it has helped your troubleshooting practices.
Stay on top of the latest Windows Server 2003 and Windows Server 2008 tips and tricks with our free Windows Server newsletter, delivered each Wednesday.