Tasklist
Updated: January 21, 2005
Displays a list of currently running processes on either a
local or remote machine.
Syntax
tasklist [/s Computer [/u
Domain\User [/p Password]]]
[{/m Module | /svc | /v}] [/fo
{TABLE | LIST | CSV}] [/nh] [/fi
Filter [/fi Filter [ ... ]]]
Parameters
/sComputer
Specifies the name or IP address of a remote
computer (do not use backslashes). The default
is the local computer.
/uDomain\User
Runs the command with the account permissions of
the user specified by User or Domain\User.
The default is the permissions of the current
logged on user on the computer issuing the
command.
/pPassword
Specifies the password of the user account that
is specified in the /u parameter.
/mModule
Lists all tasks that have DLL modules loaded in
them matching the given pattern name. If the
module name is not specified, this option
displays all modules loaded by each task.
/svc
Lists all the service information for each
process without truncation. Valid when the /fo
parameter is set to TABLE.
/v
Specifies that verbose task information be
displayed in the output. To see complete verbose
output without truncation, use in conjunction
with the /svc parameter.
/fo{ TABLE| LIST| CSV}
Specifies the format to use for the output.
Valid values are TABLE, LIST, and
CSV. The default format for output is
TABLE.
/nh
Suppresses column headers in the output. Valid
when the /fo parameter is set to TABLE
or CSV.
/fiFilter
Specifies the types of process(es) to include in
or exclude from the query. The following table
lists valid filter names, operators, and
values.NameOperatorsValueStatuseq,
neRUNNING | NOT RESPONDING |
UNKNOWNImagenameeq, neAny valid
string.PIDeq, ne, gt, lt,
ge, leAny valid positive integer.Sessioneq,
ne, gt, lt, ge,
leAny valid session number.SessionNameeq,
neAny valid string.CPUTimeeq,
ne, gt, lt, ge, leValid
time in the format of hh:mm:ss.
The mm and ss parameters should be
between 0 and 59 and hh can be any valid
unsigned numeric value.Memusageeq, ne,
gt, lt, ge, leAny
valid integer.Usernameeq, neAny
valid user name ([Domain\]User).Serviceseq,
neAny valid string.Windowtitleeq,
neAny valid string.
/?
Displays help at the command prompt.
Remarks
- The "WindowTitle" and "Status" filters are not supported when querying on a remote system.
- Tasklist is a replacement for the tlist tool.
Examples
The following examples show how you can use the tasklist
command:
tasklist /v /fi "PID gt 1000" /fo csv
tasklist /fi "USERNAME ne NT AUTHORITY\SYSTEM" /fi "STATUS eq running"
tasklist /v /fi "STATUS eq running"
tasklist /s srvmain /nh tasklist /s srvmain /svc /fi "Modules eq ntdll*"
tasklist /s srvmain /u maindom\hiropln /p p@ssW23 /nh
Formatting legend
| Format | Meaning |
| Italic | Information that the user must supply |
| Bold | Elements that the user must type exactly as shown |
| Ellipsis (...) | Parameter that can be repeated several times in a command line |
| Between brackets ([]) | Optional items |
| Between braces ({}); choices separated by pipe (|). Example: {even|odd} | Set of choices from which the user must choose only one |
| Courier font | Code or program output |