Find Process Owners With Get-Process

List processes with their owning user and resource usage.

WindowsProcessessecuritypowershellLow risk

Run Get-Process -IncludeUserName | Sort-Object CPU -Descending to rank by CPU with owners.

01Command

Command

$ Get-Process -IncludeUserName | Sort-Object CPU -Descending | Select-Object -First 10

02What it does

The -IncludeUserName switch adds the account running each process, and because the output is objects you can sort and filter to find what a specific user or service is doing. This is a scripted audit that the Task Manager cannot express as a reusable command.

03Risk

RiskLow risk

RequirementsWindows 10/11 with PowerShell 5.1 or PowerShell 7+

!Warning: Reading the owning user requires elevation on most systems, and the command can be slow on hosts with thousands of processes.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

Get-Process
Microsoft Learn · vendor-doc · 2026-09-20
Evidence: Gets running processes; -IncludeUserName adds the owning user.

Last verified: 2026-10-13 · Category: System & Settings

06Related solutions

Verify Code Signatures with Get-AuthenticodeSignature

Windowssignaturesecuritypowershell

Read the Authenticode signature status and signer of any executable or script in PowerShell.

Low risk ✓ 2026-09-17

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy

WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17

Grep on Windows: Select-String

Windowssearchtextpowershell

Search inside text files and logs with regex, returning file, line number and match.

Low risk ✓ 2026-09-17