Tasklist (original) (raw)
Displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a remote computer.
Syntax
tasklist[.exe] [/s _computer_] [/u domain\user [/p _password_]] [/fo {TABLE|LIST|CSV}] [/nh] [/fi FilterName [/fi FilterName2 [ ... ]]] [/m [_ModuleName_] | /svc | /v]
Parameters
/s Computer : Specifies the name or IP address of a remote computer (do not use backslashes). The default is the local computer.
/u Domain \ User : Runs the command with the account permissions of the user specified by User or Domain_\_User. The default is the permissions of the current logged on user on the computer issuing the command.
/p Password : Specifies the password of the user account that is specified in the /u parameter.
/fo { TABLE | LIST | CSV } : Specifies the format to use for the output. Valid values are TABLE, LIST, and CSV. The default format for output is TABLE.
/nh : Suppresses column headers in the output. Valid when the /fo parameter is set to TABLE or CSV.
/fi FilterName : Specifies the types of process(es) to include in or exclude from the query. The following table lists valid filter names, operators, and values.
| Name | Operators | Value |
|---|---|---|
| Status | eq, ne | RUNNING|NOT RESPONDING |
| Imagename | eq, ne | Any valid string. |
| PID | eq, ne, gt, lt, ge, le | Any valid positive integer. |
| Session | eq, ne, gt, lt, ge, le | Any valid session number. |
| SessionName | eq, ne | Any valid string. |
| CPUTime | eq, ne, gt, lt, ge, le | Valid time in the format of hh:mm:ss. The mm and ss parameters should be between 0 and 59 and hh can be any valid unsigned numeric value. |
| Memusage | eq, ne, gt, lt, ge, le | Any valid integer. |
| Username | eq, ne | Any valid user name ([_Domain_\]User). |
| Services | eq, ne | Any valid string. |
| Windowtitle | eq, ne | Any valid string. |
| Modules | eq, ne | Any valid string. |
/m [ ModuleName ] : Specifies to show module information for each process. When a module is specified, all the processes using that module are shown. When a module is not specified, all the processes for all the modules are shown. Cannot be used with the /svc or the /v parameter.
/svc : Lists all the service information for each process without truncation. Valid when the /fo parameter is set to TABLE. Cannot be used with the /m or the /v parameter.
/v : Specifies that verbose task information be displayed in the output. Cannot be used with the /svc or the /m parameter.
/? : Displays help at the command prompt.
- Tasklist is a replacement for the TList tool.
Examples
The following examples show how you can use the tasklist command:
tasklist /v /fi "PID gt 1000" /fo csv
tasklist /fi "USERNAME ne NT AUTHORITY\SYSTEM" /fi "STATUS eq running"
tasklist /v /fi "STATUS eq running"
tasklist /s srvmain /nh
tasklist /s srvmain /s srvny
tasklist /s srvmain /u maindom\hiropln /p p@ssW23 /nh
Formatting legend
| Format | Meaning |
|---|---|
| Italic | Information that the user must supply |
| Bold | Elements that the user must type exactly as shown |
| Ellipsis (...) | Parameter that can be repeated several times in a command line |
| Between brackets ([]) | Optional items |
| Between braces ({}); choices separated by pipe (|). Example: {even | odd} |
| Courier font | Code or program output |