Determining if a process belongs to User, System or is OS related (C#, Most likely WMI)

Question

0.00/5 (No votes)

See more:

Hi,

I'm trying to monitor all the processes on a windows system with my windows forms application using WMI. I want to know which process' are system process, which are user process(like the username in taskmanager). This is quite googleable but i also need to know which are related to windows and which are not. I haven't been able to find what i needed.
Assume my windows user name is "USER_A"; "winamp.exe" has the owner/user name as "USER_A". But "taskmgr.exe", "dwm.exe", etc also has the same user name. At first glance, path for the process (WMI, Win32_Process, ExecutablePath) is distinctive since Windows related processes are under "C:\Windows", "C:\Windows\System32" but is there any better way? Also the ones that wont need too complex(long to process) queries.

Thanks in advance.

Posted 25-May-12 9:25am

y_dev

Updated 25-May-12 16:02pm

v2

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sergey Alexandrovich Kryukov · Accepted Answer · 2012-05-25T10:05:00

Solution 1

You are right, it can be done with WMI. Please see:
http://stackoverflow.com/questions/777548/how-do-i-determine-the-owner-of-a-process-in-c[^].

—SA

Posted 25-May-12 10:05am

Sergey Alexandrovich Kryukov

Updated 28-May-12 12:08pm

v2

Comments

y_dev 25-May-12 22:07pm

Thank you for your answer. My question was a little unclear, but you see your answer is not my question, i've googled and solved that part easily. My question is how to differ taskmgr.exe(or any other windows app) from winamp.exe(or any other 3rd party app) for example.

y_dev 27-May-12 11:15am

Ouch! Sorry i was wrong your answer actually does that too. Note to self: A little sleep always helps.

Sergey Alexandrovich Kryukov 27-May-12 21:52pm

Sure. You are very welcome.
Good luck, call again.
--SA