Using the Resource Monitor in Windows Server 2008 R2

Students in one of my recent Windows Server 2008 R2 classes, were asking me how to discover what is in SvcHost.exe, as well as what services and ports are in use by any of the running process. I suggested that they take a look at the Resource Monitor. 

To discover what is running in any of the instances of the SvcHost.exe, first launch the Resource Monitor. To launch the Resource Monitor click the Start button and type Resource and select the Resource Monitor. Then click on the CPU tab, as demonstrated below:

In the Processes list, locate a SvcHost.exe.   (It is easiest to click on the Image heading to sort the list alphabetically. )  Select the checkbox to the left of the SvcHost.exe.  This will move the selected SvcHost.exe to the top of the Image list, as demonstrated below:

Now that the SvcHost.exe is selected, expand the Services portion of the window, to reveal the Services running in this SvcHost.exe. 

To view the files that the SvcHost.exe is utilizing, expand the Associated Modules section.

To view the ports that the SvcHost.exe is using select the Network tab, and expand the Listening ports section.

I think you will find the Resource Monitor a very useful tool, in Windows Server 2008 R2 as well as Windows 7.

- Janet Nichols, Windows Server Expert; MCT, MCSE, MCITP: Enterprise Admin, Server Admin; Windows 7 EDA, MCTS LinkIn with Janet