Compartilhar via


MSFT_MTProcess class

The process data object. Statistic data is calculated based on current interval seconds setting.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

[UMLPackagePath("CIM::Core::CoreElements"), dynamic, provider("mttmprov"), AMENDMENT]
class MSFT_MTProcess : CIM_ManagedElement
{
  string   InstanceID;
  string   Caption;
  string   ElementName;
  string   Description;
  uint32   ProcessId;
  string   Name;
  string   ExecutablePath;
  uint16   ProcessStatus;
  string   UserName;
  string   CommandLine;
  uint32   SessionId;
  uint64   CpuTime;
  uint64   CycleTime;
  datetime CreationDate;
  uint64   CreationTime;
  uint64   WorkingSetSize;
  uint64   PeakWorkingSetSize;
  uint64   PrivateWorkingSetSize;
  uint64   SharedWorkingSetSize;
  uint64   CommitCharge;
  uint64   PagedPool;
  uint64   NonPagedPool;
  uint32   PageFaults;
  uint32   BasePriority;
  uint32   HandleCount;
  uint32   ThreadCount;
  uint32   UserObjects;
  uint32   GdiObjects;
  uint64   ReadOperationCount;
  uint64   WriteOperationCount;
  uint64   OtherOperationCount;
  uint64   ReadTransferCount;
  uint64   WriteTransferCount;
  uint64   OtherTransferCount;
  uint16   OperatingSystemContext;
  uint16   Platform;
  boolean  Elevated;
  uint16   UACVirtualization;
  boolean  DataExecutionPrevention;
  boolean  IsImmersive;
  uint16   IntervalSeconds;
  real32   CpuPercent;
  real32   CyclePercent;
  sint64   DeltaWorkingSetSize;
  sint32   DeltaPageFaults;
};

Members

The MSFT_MTProcess class has these types of members:

Methods

The MSFT_MTProcess class has these methods.

Method Description
CreateDump Create process mini dump of the process instance.
CreateProcess Create a new process.

Properties

The MSFT_MTProcess class has these properties.

BasePriority

Data type: uint32

Access type: Read-only

Gets the ranking that determines the order in which threads of a process are scheduled.

Caption

Data type: string

Access type: Read-only

Qualifiers: MaxLen (64)

The Caption property is a short textual description (one- line string) of the object.

This property is inherited from CIM_ManagedElement.

CommandLine

Data type: string

Access type: Read-only

Gets the command line used to start a specific process, if applicable.

CommitCharge

Data type: uint64

Access type: Read-only

Gets the amount of virtual memory reserved, in bytes, by the operating system for the process.

CpuPercent

Data type: real32

Access type: Read-only

Gets the current processor utilization percentage across cores since last update.

CpuTime

Data type: uint64

Access type: Read-only

Gets the total processor time, in 100 nanosecond units, elapsed since the process began.

CreationDate

Data type: datetime

Access type: Read-only

Gets the creation date time of the process.

CreationTime

Data type: uint64

Access type: Read-only

Gets the creation time of the process, in the number of 100-nanosecond intervals since January 1, 1601 (UTC).

CyclePercent

Data type: real32

Access type: Read-only

Gets the current cycle time utilization percentage since last update.

CycleTime

Data type: uint64

Access type: Read-only

Gets the total cycle time, in 100 nanosecond units, elapsed since the process began.

DataExecutionPrevention

Data type: boolean

Access type: Read-only

Specifies whether Data Execution Prevention (a security feature) enabled or disabled for the process.

DeltaPageFaults

Data type: sint32

Access type: Read-only

Gets the change in number of page faults in the process since last update.

DeltaWorkingSetSize

Data type: sint64

Access type: Read-only

Gets the change, in bytes, in working set usage by the process since last update.

Description

Data type: string

Access type: Read-only

Qualifiers: Override (Description)

Description of process.

ElementName

Data type: string

Access type: Read-only

Gets a user-friendly name for the object. This property allows each instance to define a user-friendly name in addition to its key properties, identity data, and description information. Note that the Name property of CIM_ManagedSystemElement is also defined as a user-friendly name. But, it is often subclassed to be a Key. It is not reasonable that the same property can convey both identity and a user-friendly name, without inconsistencies. Where Name exists and is not a Key (such as for instances of CIM_LogicalDevice), the same information can be present in both the Name and ElementName properties. Note that if there is an associated instance of CIM_EnabledLogicalElementCapabilities, restrictions on this properties may exist as defined in ElementNameMask and MaxElementNameLen properties defined in that class.

This property is inherited from CIM_ManagedElement.

Elevated

Data type: boolean

Access type: Read-only

Gets a value that specifies whether the process is running elevated or not.

ExecutablePath

Data type: string

Access type: Read-only

Gets the path to the executable file of the process.

GdiObjects

Data type: uint32

Access type: Read-only

Gets the number of GDI objects used by the process.

HandleCount

Data type: uint32

Access type: Read-only

Gets the total number of open handles owned by the process.

InstanceID

Data type: string

Access type: Read-only

InstanceID is an optional property that may be used to opaquely and uniquely identify an instance of this class within the scope of the instantiating Namespace. Various subclasses of this class may override this property to make it required, or a key. Such subclasses may also modify the preferred algorithms for ensuring uniqueness that are defined below. To ensure uniqueness within the NameSpace, the value of InstanceID should be constructed using the following "preferred" algorithm: "OrgID:LocalID" Where OrgID and LocalID are separated by a colon (:), and where OrgID must include a copyrighted, trademarked, or otherwise unique name that is owned by the business entity that is creating or defining the InstanceID or that is a registered ID assigned to the business entity by a recognized global authority. (This requirement is similar to the <Schema Name>_<Class Name> structure of Schema class names.) In addition, to ensure uniqueness, OrgID must not contain a colon (:). When using this algorithm, the first colon to appear in InstanceID must appear between OrgID and LocalID. LocalID is chosen by the business entity and should not be reused to identify different underlying (real-world) elements. If not null and the above "preferred" algorithm is not used, the defining entity must assure that the resulting InstanceID is not reused across any InstanceIDs produced by this or other providers for the NameSpace of this instance. If not set to null for DMTF-defined instances, the "preferred" algorithm must be used with the OrgID set to "CIM".

This property is inherited from CIM_ManagedElement.

IntervalSeconds

Data type: uint16

Access type: Read-only

Gets the current data collection interval in seconds.

IsImmersive

Data type: boolean

Access type: Read-only

Gets a value that indicates whether the process is an App Store application.

Name

Data type: string

Access type: Read-only

Gets the name of process either executable image name or internal system process name.

NonPagedPool

Data type: uint64

Access type: Read-only

Gets the amount, in bytes, of non-pageable kernel memory allocated by the kernel or drivers on behalf of the process.

OperatingSystemContext

Data type: uint16

Access type: Read-only

Gets the operating system context in which the process is running.

Unknown (0)

XP (1)

Vista (2)

Win7 (3)

Win8 (4)

Win8.1 (5)

Win10 (6)

OtherOperationCount

Data type: uint64

Access type: Read-only

Gets the number of non-read/non-write I/O operations (for instance, control functions) generated by the process since it was started.

OtherTransferCount

Data type: uint64

Access type: Read-only

Gets the total number of bytes read by the process in I/O operations other than read/write(for instance, control functions).

PagedPool

Data type: uint64

Access type: Read-only

Gets the amount, in bytes, of pageable kernel memory allocated by the kernel or drivers on behalf of the process.

PageFaults

Data type: uint32

Access type: Read-only

Gets the number of page faults generated by the process since it was started.

PeakWorkingSetSize

Data type: uint64

Access type: Read-only

Gets the maximum amount of physical memory, in bytes, used by the process.

Platform

Data type: uint16

Access type: Read-only

Gets the platform (32 bit or 64 bit) on which the process is running.

32-bit (0)

64-bit (1)

PrivateWorkingSetSize

Data type: uint64

Access type: Read-only

Gets the amount of physical memory, in bytes, in use by the process that cannot be used by other processes.

ProcessId

Data type: uint32

Access type: Read-only

Qualifiers: key

Gets the global process identifier that is used to identify a process. The value is valid from the time a process is created until it is terminated.

ProcessStatus

Data type: uint16

Access type: Read-only

Gets the status of process execution.

Unknown (0)

Running (1)

Suspended (2)

ReadOperationCount

Data type: uint64

Access type: Read-only

Gets the number of read I/O operations generated by the process since it was started.

ReadTransferCount

Data type: uint64

Access type: Read-only

Gets the total number of bytes read by the process in I/O operations.

SessionId

Data type: uint32

Access type: Read-only

Gets the unique identifier that an operating system generates when a session is created. A session spans a period of time from logon until logoff from a specific system.

SharedWorkingSetSize

Data type: uint64

Access type: Read-only

Gets the amount of physical memory, in bytes, in use by the process that can be shared with other processes.

ThreadCount

Data type: uint32

Access type: Read-only

Gets the number of active threads in a process.

UACVirtualization

Data type: uint16

Access type: Read-only

Gets the a value that specifies whether User Account Control (UAC) virtualization is enabled, disabled, or not allowed in the process.

Unknown (0)

Disabled (1)

Enabled (2)

NotAllowed (3)

UserName

Data type: string

Access type: Read-only

Gets the user name of process.

UserObjects

Data type: uint32

Access type: Read-only

Gets the number of windows manager objects (windows, menus, cursors, keyboard layouts, monitors, etc.) used by the process.

WorkingSetSize

Data type: uint64

Access type: Read-only

Gets the amount of physical memory, in Kilobytes, currently in use by the process.

WriteOperationCount

Data type: uint64

Access type: Read-only

Gets the number of write I/O operations generated by the process since it was started.

WriteTransferCount

Data type: uint64

Access type: Read-only

Gets the total number of bytes written by the process in I/O operations.

Examples

This PowerShell snippet connects to the TestSrv1 computer and enumerates the processes.

$option = New-CimSessionOption -Protocol WSMan
$session = New-CimSession -ComputerName TestSrv1 -SessionOption $option -Credential (Get-Credential)
Get-CimInstance -CimSession $session -Namespace Root/Microsoft/Windows/ManagementTools MSFT_MTProcess | Select Name,CpuPercent,ProcessId

Requirements

Minimum supported client
None supported
Minimum supported server
Windows Server 2016
Namespace
Root\Microsoft\Windows\ManagementTools
MOF
MtTmProv.mof
DLL
MtTmProv.dll

See also

CIM_ManagedElement

Management Tools Task Manager WMI Provider