MSFT_MTProcess class
The process data object. Statistic data is calculated based on current interval seconds setting.
The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.
Syntax
[UMLPackagePath("CIM::Core::CoreElements"), dynamic, provider("mttmprov"), AMENDMENT]
class MSFT_MTProcess : CIM_ManagedElement
{
string InstanceID;
string Caption;
string ElementName;
string Description;
uint32 ProcessId;
string Name;
string ExecutablePath;
uint16 ProcessStatus;
string UserName;
string CommandLine;
uint32 SessionId;
uint64 CpuTime;
uint64 CycleTime;
datetime CreationDate;
uint64 CreationTime;
uint64 WorkingSetSize;
uint64 PeakWorkingSetSize;
uint64 PrivateWorkingSetSize;
uint64 SharedWorkingSetSize;
uint64 CommitCharge;
uint64 PagedPool;
uint64 NonPagedPool;
uint32 PageFaults;
uint32 BasePriority;
uint32 HandleCount;
uint32 ThreadCount;
uint32 UserObjects;
uint32 GdiObjects;
uint64 ReadOperationCount;
uint64 WriteOperationCount;
uint64 OtherOperationCount;
uint64 ReadTransferCount;
uint64 WriteTransferCount;
uint64 OtherTransferCount;
uint16 OperatingSystemContext;
uint16 Platform;
boolean Elevated;
uint16 UACVirtualization;
boolean DataExecutionPrevention;
boolean IsImmersive;
uint16 IntervalSeconds;
real32 CpuPercent;
real32 CyclePercent;
sint64 DeltaWorkingSetSize;
sint32 DeltaPageFaults;
};
Members
The MSFT_MTProcess class has these types of members:
Methods
The MSFT_MTProcess class has these methods.
Method | Description |
---|---|
CreateDump | Create process mini dump of the process instance. |
CreateProcess | Create a new process. |
Properties
The MSFT_MTProcess class has these properties.
-
BasePriority
-
-
Data type: uint32
-
Access type: Read-only
Gets the ranking that determines the order in which threads of a process are scheduled.
-
-
Caption
-
-
Data type: string
-
Access type: Read-only
-
Qualifiers: MaxLen (64)
The Caption property is a short textual description (one- line string) of the object.
This property is inherited from CIM_ManagedElement.
-
-
CommandLine
-
-
Data type: string
-
Access type: Read-only
Gets the command line used to start a specific process, if applicable.
-
-
CommitCharge
-
-
Data type: uint64
-
Access type: Read-only
Gets the amount of virtual memory reserved, in bytes, by the operating system for the process.
-
-
CpuPercent
-
-
Data type: real32
-
Access type: Read-only
Gets the current processor utilization percentage across cores since last update.
-
-
CpuTime
-
-
Data type: uint64
-
Access type: Read-only
Gets the total processor time, in 100 nanosecond units, elapsed since the process began.
-
-
CreationDate
-
-
Data type: datetime
-
Access type: Read-only
Gets the creation date time of the process.
-
-
CreationTime
-
-
Data type: uint64
-
Access type: Read-only
Gets the creation time of the process, in the number of 100-nanosecond intervals since January 1, 1601 (UTC).
-
-
CyclePercent
-
-
Data type: real32
-
Access type: Read-only
Gets the current cycle time utilization percentage since last update.
-
-
CycleTime
-
-
Data type: uint64
-
Access type: Read-only
Gets the total cycle time, in 100 nanosecond units, elapsed since the process began.
-
-
DataExecutionPrevention
-
-
Data type: boolean
-
Access type: Read-only
Specifies whether Data Execution Prevention (a security feature) enabled or disabled for the process.
-
-
DeltaPageFaults
-
-
Data type: sint32
-
Access type: Read-only
Gets the change in number of page faults in the process since last update.
-
-
DeltaWorkingSetSize
-
-
Data type: sint64
-
Access type: Read-only
Gets the change, in bytes, in working set usage by the process since last update.
-
-
Description
-
-
Data type: string
-
Access type: Read-only
-
Qualifiers: Override (Description)
Description of process.
-
-
ElementName
-
-
Data type: string
-
Access type: Read-only
Gets a user-friendly name for the object. This property allows each instance to define a user-friendly name in addition to its key properties, identity data, and description information. Note that the Name property of CIM_ManagedSystemElement is also defined as a user-friendly name. But, it is often subclassed to be a Key. It is not reasonable that the same property can convey both identity and a user-friendly name, without inconsistencies. Where Name exists and is not a Key (such as for instances of CIM_LogicalDevice), the same information can be present in both the Name and ElementName properties. Note that if there is an associated instance of CIM_EnabledLogicalElementCapabilities, restrictions on this properties may exist as defined in ElementNameMask and MaxElementNameLen properties defined in that class.
This property is inherited from CIM_ManagedElement.
-
-
Elevated
-
-
Data type: boolean
-
Access type: Read-only
Gets a value that specifies whether the process is running elevated or not.
-
-
ExecutablePath
-
-
Data type: string
-
Access type: Read-only
Gets the path to the executable file of the process.
-
-
GdiObjects
-
-
Data type: uint32
-
Access type: Read-only
Gets the number of GDI objects used by the process.
-
-
HandleCount
-
-
Data type: uint32
-
Access type: Read-only
Gets the total number of open handles owned by the process.
-
-
InstanceID
-
-
Data type: string
-
Access type: Read-only
InstanceID is an optional property that may be used to opaquely and uniquely identify an instance of this class within the scope of the instantiating Namespace. Various subclasses of this class may override this property to make it required, or a key. Such subclasses may also modify the preferred algorithms for ensuring uniqueness that are defined below. To ensure uniqueness within the NameSpace, the value of InstanceID should be constructed using the following "preferred" algorithm: "OrgID:LocalID" Where OrgID and LocalID are separated by a colon (:), and where OrgID must include a copyrighted, trademarked, or otherwise unique name that is owned by the business entity that is creating or defining the InstanceID or that is a registered ID assigned to the business entity by a recognized global authority. (This requirement is similar to the <Schema Name>_<Class Name> structure of Schema class names.) In addition, to ensure uniqueness, OrgID must not contain a colon (:). When using this algorithm, the first colon to appear in InstanceID must appear between OrgID and LocalID. LocalID is chosen by the business entity and should not be reused to identify different underlying (real-world) elements. If not null and the above "preferred" algorithm is not used, the defining entity must assure that the resulting InstanceID is not reused across any InstanceIDs produced by this or other providers for the NameSpace of this instance. If not set to null for DMTF-defined instances, the "preferred" algorithm must be used with the OrgID set to "CIM".
This property is inherited from CIM_ManagedElement.
-
-
IntervalSeconds
-
-
Data type: uint16
-
Access type: Read-only
Gets the current data collection interval in seconds.
-
-
IsImmersive
-
-
Data type: boolean
-
Access type: Read-only
Gets a value that indicates whether the process is an App Store application.
-
-
Name
-
-
Data type: string
-
Access type: Read-only
Gets the name of process either executable image name or internal system process name.
-
-
NonPagedPool
-
-
Data type: uint64
-
Access type: Read-only
Gets the amount, in bytes, of non-pageable kernel memory allocated by the kernel or drivers on behalf of the process.
-
-
OperatingSystemContext
-
-
Data type: uint16
-
Access type: Read-only
Gets the operating system context in which the process is running.
-
-
Unknown (0)
-
XP (1)
-
Vista (2)
-
Win7 (3)
-
Win8 (4)
-
Win8.1 (5)
-
Win10 (6)
OtherOperationCount
-
Data type: uint64
-
Access type: Read-only
Gets the number of non-read/non-write I/O operations (for instance, control functions) generated by the process since it was started.
OtherTransferCount
-
Data type: uint64
-
Access type: Read-only
Gets the total number of bytes read by the process in I/O operations other than read/write(for instance, control functions).
PagedPool
-
Data type: uint64
-
Access type: Read-only
Gets the amount, in bytes, of pageable kernel memory allocated by the kernel or drivers on behalf of the process.
PageFaults
-
Data type: uint32
-
Access type: Read-only
Gets the number of page faults generated by the process since it was started.
PeakWorkingSetSize
-
Data type: uint64
-
Access type: Read-only
Gets the maximum amount of physical memory, in bytes, used by the process.
Platform
-
Data type: uint16
-
Access type: Read-only
Gets the platform (32 bit or 64 bit) on which the process is running.
32-bit (0)
64-bit (1)
PrivateWorkingSetSize
-
Data type: uint64
-
Access type: Read-only
Gets the amount of physical memory, in bytes, in use by the process that cannot be used by other processes.
ProcessId
-
Data type: uint32
-
Access type: Read-only
-
Qualifiers: key
Gets the global process identifier that is used to identify a process. The value is valid from the time a process is created until it is terminated.
ProcessStatus
-
Data type: uint16
-
Access type: Read-only
Gets the status of process execution.
Unknown (0)
Running (1)
Suspended (2)
ReadOperationCount
-
Data type: uint64
-
Access type: Read-only
Gets the number of read I/O operations generated by the process since it was started.
ReadTransferCount
-
Data type: uint64
-
Access type: Read-only
Gets the total number of bytes read by the process in I/O operations.
SessionId
-
Data type: uint32
-
Access type: Read-only
Gets the unique identifier that an operating system generates when a session is created. A session spans a period of time from logon until logoff from a specific system.
SharedWorkingSetSize
-
Data type: uint64
-
Access type: Read-only
Gets the amount of physical memory, in bytes, in use by the process that can be shared with other processes.
ThreadCount
-
Data type: uint32
-
Access type: Read-only
Gets the number of active threads in a process.
UACVirtualization
-
Data type: uint16
-
Access type: Read-only
Gets the a value that specifies whether User Account Control (UAC) virtualization is enabled, disabled, or not allowed in the process.
Unknown (0)
Disabled (1)
Enabled (2)
NotAllowed (3)
UserName
-
Data type: string
-
Access type: Read-only
Gets the user name of process.
UserObjects
-
Data type: uint32
-
Access type: Read-only
Gets the number of windows manager objects (windows, menus, cursors, keyboard layouts, monitors, etc.) used by the process.
WorkingSetSize
-
Data type: uint64
-
Access type: Read-only
Gets the amount of physical memory, in Kilobytes, currently in use by the process.
WriteOperationCount
-
Data type: uint64
-
Access type: Read-only
Gets the number of write I/O operations generated by the process since it was started.
WriteTransferCount
-
Data type: uint64
-
Access type: Read-only
Gets the total number of bytes written by the process in I/O operations.
Examples
This PowerShell snippet connects to the TestSrv1 computer and enumerates the processes.
$option = New-CimSessionOption -Protocol WSMan
$session = New-CimSession -ComputerName TestSrv1 -SessionOption $option -Credential (Get-Credential)
Get-CimInstance -CimSession $session -Namespace Root/Microsoft/Windows/ManagementTools MSFT_MTProcess | Select Name,CpuPercent,ProcessId
Requirements
Minimum supported client |
None supported |
Minimum supported server |
Windows Server 2016 |
Namespace |
Root\Microsoft\Windows\ManagementTools |
MOF |
|
DLL |
|