If it helps, this will tell you who the owners of the processes are:
$owners = @{} gwmi win32_process |% {$owners[$_.handle] = $_.getowner().user} get-process | select processname,Id,@{l="Owner";e={$owners[$_.id.tostring()]}} ________________________________ From: Tu, Kevin [...@ccscorporation.ca] Sent: Tuesday, January 04, 2011 2:42 PM To: MS-Exchange Admin Issues Subject: Lots of cmd.exe processes on Mailbox Server Hi, There are lots of cmd.exe processes running on our clustered Mailbox server. Is this an issue or not? We haven’t seen any issue in Event log, and no SCOM alerts related to this as well. The mailbox server is running on Exchange 2007 SP2 Rollup 1, Windows Server 2008 SP2 with SCOM agent installed. [cid:image001.png@01CBAC14.95D74E70] Thanks, Kevin This email and any files transmitted with it are solely intended for the use of the addressee(s) and may contain information that is confidential and privileged. If you receive this email in error, please advise us by return email immediately. Please also disregard the contents of the email, delete it and destroy any copies immediately. CCS Corporation and its subsidiaries do not accept liability for the views expressed in the email or for the consequences of any malicious code that may be transmitted with this email. This email is also subject to copyright. No part of it should be reproduced, adapted or transmitted without the written consent of the copyright owner. CCS-06-01-2009 --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
<<inline: image001.png>>