Need to list top 5 CPU Intensive processes including owner

[bhimmler]

Having difficulty with a task... I need to list top 5 CPU Intensive processes including owner.

ANY Help is appreciated!

Hoping someone out there has done the same or something similar that they can share.

 

[blister911]

I don't have anything that gets the owner, but this should get you close:

$top_procs = 5
$server = "MyServer"

gwmi -computer $server Win32_PerfFormattedData_PerfProc_Process | where {$_.name -NOTLIKE 'IDLE' -AND $_.name -NOTLIKE '_Total'} | sort PercentProcessorTime -desc | select Name,PercentProcessorTime | Select -First $top_procs | ft -auto

Light travels faster than sound. That's why some people appear bright until you hear them speak.

 

[bhimmler]

Thank You. I have been working with something similar, but am having trouble trying to incorporate userid/owner.

 

[gangstanthony]

don't remember where i found this, but it works for me.

$owners = @{}
gwmi win32_process |% {$owners[$_.handle] = $_.getowner().user}
get-process | select processname,Id,@{l="Owner";e={$owners[$_.id.tostring()]}}

 

[bhimmler]

Thank You! I will tinker with this!

 

[blister911]

I haven't verified the information, but see if this works for you.

$top_procs = 5
$server = "MyServer"

$processes = gwmi -computer $server Win32_PerfFormattedData_PerfProc_Process | where {$_.name -NOTLIKE 'IDLE' -AND $_.name -NOTLIKE '_Total'} | sort PercentProcessorTime -desc | select Name,PercentProcessorTime,Owner,IDProcess,Handles | Select -First $top_procs

foreach ($process in $processes)
	{
	 [string]$handles = (get-process -computername $server | where {$_.ID -eq $proc_id} | select handles)
 	 $handles_start = $handles.IndexOf("=") + 1
	 $handles_end = $handles.length - 1
	 $handles = $handles.substring($handles_start,($handles_end-$handles_start))
	 $process.handles = $handles

	 [string]$owner = gwmi win32_process -ComputerName $server  | where {$_.handles -eq $handles} | select {$_.getowner().user}
	 $owner_start = $owner.IndexOf("=") + 1
	 if ($owner_start -gt 1)
		{
		 $owner_end = $owner.length - 1
		 $owner = $owner.substring($owner_start,($owner_end-$owner_start))
		}

	 $process.owner = $owner
	}
	
$processes | ft name,PercentProcessorTime,Owner,IDProcess -autosize

Light travels faster than sound. That's why some people appear bright until you hear them speak.