This document will walk you through using Process Monitor to capture computer events for troubleshooting.  You should only install Process Monitor at the direction of the Solutions Hub.

If you have any questions please let us know.

STEP A:  Prepare Your Computer

Process Monitor will gather information on all computer processes (both relevant and not).  In order to get a clear picture of what is happening we need to prepare your computer:

1. Close all non-essential programs 
   1. non-essential relative to the problem we are troubleshooting

Once done, we need to setup the Process Monitor software.

STEP B: Open and Prepare Process Monitor

Prepare Process Monitor (procmon)

1. Double-Click to open the program
2. Click Yes to allow it to run.
3. Click Agree (if prompted)
4. Press CTRL + E
   1. or click the File Menu > Capture Events (turns off capturing)

1. Press CTRL + X
   1. or click the Edit Menu > Clear Display (erases all current events)

Now you are set to recreate the problem and capture events.

STEP C: Running Process Monitor

1. Press CTRL + E
   1. or click the File Menu > Capture Events (turns on capturing)

Now you can open the program or attempt to recreate the problem we are troubleshooting

1. Once the problem is recreated stop what you are doing and save the logs.
   1. DO NOT REBOOT – if the computer is stuck contact the Solutions Hub or your specific troubleshooting agent.
2. Press CTRL + E
   1. or click the File Menu > Capture Events (turns on capturing)

STEP D: Saving the Logs

Go back to the Process Monitor program:

1. Press CTRL + S
   1. or click the File Menu > Save
2. In the Save window select the following options:
   1. All Events
   2. Native Process Monitor Format
3. Give the file a name and Click OK.