{"id":701,"date":"2014-07-01T09:00:43","date_gmt":"2014-07-01T16:00:43","guid":{"rendered":"http:\/\/www.coretechnologies.com\/blog\/?p=701"},"modified":"2014-07-01T09:00:43","modified_gmt":"2014-07-01T16:00:43","slug":"using-tasklist-to-check-windows-services","status":"publish","type":"post","link":"https:\/\/www.coretechnologies.com\/blog\/miscellaneous\/using-tasklist-to-check-windows-services\/","title":{"rendered":"Using TASKLIST to check your Windows Services"},"content":{"rendered":"

\nIf you are comfortable working with Windows Services from the command line, take a look at Microsoft’s TASKLIST utility. This often overlooked tool — available on all versions of Windows — can help you answer the following questions as you troubleshoot your Windows Services:\n<\/p>\n

What is the PID Associated with a Running Service?<\/b><\/h2>\n

\nYou can use the name of the service to look up the identifier of the process associated with it. For example, to find the PID of the Print Spooler service (named “Spooler”), use:\n<\/p>\n

TASKLIST \/SVC \/FI "SERVICES eq Spooler"<\/b><\/p><\/blockquote>\n

\nHere is the result you can expect, with the PID listed in the central column:\n<\/p>\n


\n\"TASKLIST
\n<\/a><\/p>\n

What Windows Services are Being Hosted by a Specific Process?<\/b><\/h2>\n

\nIf you are considering forcibly terminating a process, it may be wise to confirm that doing so will not unexpectedly kill related services! TASKLIST.EXE comes to the rescue by easily showing what services are running in a given process. For example, to see what services are behind the process with PID 1234, type:\n<\/p>\n

TASKLIST \/SVC \/FI "PID eq 1234"<\/b><\/p><\/blockquote>\n

\nHere we can see that the svchost process with PID 1284 is managing five (!) core services:\n<\/p>\n


\n\"TASKLIST
\n<\/a><\/p>\n

\nNote that TASKLIST can interrogate remote machines as well. Simply add the \/S \/U and \/P flags to the command line to specify the system, user name and password respectively.\n<\/p>\n

\nEnjoy!<\/p>\n