General discussion

Locked

Determining Process Start Times

By aaronradigan ·
How do I determine what time a process started? Is this information available in NT. I'm familiar with taskmgr, tlist, pstat, pmon, pview, and pulist and the information they provide.

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Determining Process Start Times

by leo.valmores In reply to Determining Process Start ...

For you to track what time a process starts, you have to enable logging of processes in the events viewer. For NT W/S, use User Manager (Server, use User Mgr for Domains), go to Policies > Audit > Check or enable Process tracking for Success or Failure. Re-start W/S. In the Security log of the Events Viewer, you can note the date and time of processes that have started or exited. You can further use Filters on Event viewer to zero-in on which processes you wanted to monitor.

Hope this helps

Collapse -

Determining Process Start Times

by aaronradigan In reply to Determining Process Start ...

Poster rated this answer

Collapse -

Determining Process Start Times

by aaronradigan In reply to Determining Process Start ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums