Tasklist
Archived: 2026-04-05 23:07:06 UTC
Displays a list of applications and services with their Process ID (PID) for all tasks running on either a local or a
remote computer.
tasklist[.exe] [/s computer] [/u domain\user [/p password]] [/fo {TABLE|LIST|CSV}] [/nh] [/fi FilterName
[/fi FilterName2 [ ... ]]] [/m [ModuleName] | /svc | /v] 
/s   Computer   : Specifies the name or IP address of a remote computer (do not use backslashes). The default is
the local computer.
/u   Domain \ User   : Runs the command with the account permissions of the user specified by User or
Domain\User. The default is the permissions of the current logged on user on the computer issuing the command.
/p   Password   : Specifies the password of the user account that is specified in the /u parameter.
/fo { TABLE | LIST | CSV } : Specifies the format to use for the output. Valid values are TABLE, LIST, and
CSV. The default format for output is TABLE.
/nh   : Suppresses column headers in the output. Valid when the /fo parameter is set to TABLE or CSV.
/fi   FilterName   : Specifies the types of process(es) to include in or exclude from the query. The following table
lists valid filter names, operators, and values.
Name Operators Value
Status eq, ne RUNNING|NOT RESPONDING
Imagename eq, ne Any valid string.
PID
eq, ne, gt, lt,
ge, le
Any valid positive integer.
Session
eq, ne, gt, lt,
ge, le
Any valid session number.
https://technet.microsoft.com/en-us/library/bb491010.aspx
Page 1 of 3

Name Operators Value
SessionName eq, ne Any valid string.
CPUTime
eq, ne, gt, lt,
ge, le
Valid time in the format of hh:mm:ss. The mm and ss parameters should be
between 0 and 59 and hh can be any valid unsigned numeric value.
Memusage
eq, ne, gt, lt,
ge, le
Any valid integer.
Username eq, ne Any valid user name ([Domain\]User).
Services eq, ne Any valid string.
Windowtitle eq, ne Any valid string.
Modules eq, ne Any valid string.
/m [ ModuleName ] : Specifies to show module information for each process. When a module is specified, all the
processes using that module are shown. When a module is not specified, all the processes for all the modules are
shown. Cannot be used with the /svc or the /v parameter.
/svc   : Lists all the service information for each process without truncation. Valid when the /fo parameter is set to
TABLE. Cannot be used with the /m or the /v parameter.
/v   : Specifies that verbose task information be displayed in the output. Cannot be used with the /svc or the /m
parameter.
/? : Displays help at the command prompt.
Tasklist is a replacement for the TList tool.
The following examples show how you can use the tasklist command:
tasklist /v /fi "PID gt 1000" /fo csv
tasklist /fi "USERNAME ne NT AUTHORITY\SYSTEM" /fi "STATUS eq running"
tasklist /v /fi "STATUS eq running"
https://technet.microsoft.com/en-us/library/bb491010.aspx
Page 2 of 3

tasklist /s srvmain /nh
tasklist /s srvmain /s srvny
tasklist /s srvmain /u maindom\hiropln /p p@ssW23 /nh
Format Meaning
Italic Information that the user must supply
Bold
Elements that the user must type exactly as
shown
Ellipsis (...)
Parameter that can be repeated several times in a
command line
Between brackets ([]) Optional items
Between braces ({}); choices separated by pipe (|).
Example: {even|odd}
Set of choices from which the user must choose
only one
Courier font Code or program output
Source: https://technet.microsoft.com/en-us/library/bb491010.aspx
https://technet.microsoft.com/en-us/library/bb491010.aspx
Page 3 of 3