Since I only want to run it once, I chose “One Time”. On the right pane, click on Create Basic Task….In the left pane, click on Task Scheduler Library.On the machine, go to the Administrative Tools and open the Task Scheduler console.First, download Process Monitor if you haven’t already done that, and save it on the machine you want to monitor.Create the scheduled task to run Process Monitor So, let’s put the scheduled task together. Looks like we have enough arguments to choose from to get this to work. So, what options do we have when running Process Monitor? So it would be cool if it was possible to run Process Monitor as a scheduled task, run it for a few minutes (when the issue occurs) and retrieve the log the next morning to analyze it. To complicate matters, the systems themselves were in the production environment, and since Process Monitor does have a (hefty) impact on system performance (and the logs it creates grows very large very quick) I couldn’t just start it before leaving for home, leaving it running until I came back to work the next morning. What was troublesome however, is that the issue I was looking into only occurred at night and I didn’t feel much for staying up late to fire off Process Monitor. To look into what processes are doing in the background, I turn to Sysinternals’ Process Monitor – one of the tools I recommend to master as an IT consultant. When troubleshooting an issue for a client of mine, I was in need for some further debugging information.

Procmon logs