• Facebook
  • RSS Feed
  • Instagram
  • LinkedIn
  • Twitter
Aug 022010
 

One of the other interesting SysInternals tools is called Handle.exe :

http://technet.microsoft.com/en-us/sysinternals/bb896655.aspx

With this tool you can find out which processes have a file locked open.  For example :

C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlook>c:handle asdasd.docx -u

Handle v3.42

Copyright (C) 1997-2008 Mark Russinovich

Sysinternals – www.sysinternals.com

WINWORD.EXE        pid: 3212   ENTERPRISErobert_wilcox   398: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookasdasd.docx

And

C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlook>c:handle outlook1.ost -u

Handle v3.42

Copyright (C) 1997-2008 Mark Russinovich

Sysinternals – www.sysinternals.com

communicator.exe   pid: 3256   ENTERPRISErobert_wilcox   D50: Sessions1BaseNamedObjectsEMSMDBCacheOwner-C:/Users/robert_wilcox/AppData/Local/Microsoft/Outlook/outlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox   6B0: Sessions1BaseNamedObjectsEMSMDBCacheOwner-C:/Users/robert_wilcox/AppData/Local/Microsoft/Outlook/outlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox   748: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlook~outlook1.ost.tmp

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox   74C: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox   750: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox   B44: Sessions1BaseNamedObjectsEMSMDBCacheOwner-C:/Users/robert_wilcox/AppData/Local/Microsoft/Outlook/outlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  18B0: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  252C: Sessions1BaseNamedObjectsEMSMDBCacheOwner-C:/Users/robert_wilcox/AppData/Local/Microsoft/Outlook/outlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  309C: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  4FD4: Sessions1BaseNamedObjectsEMSMDBCacheOwner-C:/Users/robert_wilcox/AppData/Local/Microsoft/Outlook/outlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  54C4: Sessions1BaseNamedObjectsEMSMDBCacheOwner-C:/Users/robert_wilcox/AppData/Local/Microsoft/Outlook/outlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  56D0: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  5A94: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

OUTLOOK.EXE        pid: 4644   ENTERPRISErobert_wilcox  6164: C:Usersrobert_wilcoxAppDataLocalMicrosoftOutlookoutlook1.ost

It only shows totally current open handles.  So if you open a file in notepad (for example) that doesn’t maintain an open file lock on a file, so it shows no handles.

The –u adds information on the user who has the file open, and of course there is the PID information showing the process ID, and thread information too.

If you enjoyed this post, please consider leaving a comment or subscribing to the RSS feed to have future articles delivered to your feed reader.

 Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

(required)

(required)