With Powershell, how can I get the id of a process owned by a specific user?

Question

Using Powershell, I want to do the equivalent of Unix

ps -auxc | grep Emacs

kill -9 364

(Assuming 365 was the pid the first command told me.)

How do I do that? I find it incredibly hard to get Powershell to tell me the owner of a process and the way I tried, getting a wmi-object win32_process and then make that into a list of processes named "explorer.exe" just started lots of explorer.exe instances.

score 1 · Accepted Answer · answered Feb 09 '11 at 14:33

1

I found this with a quick google:

$owners = @{}
gwmi win32_process |% {$owners[$_.handle] = $_.getowner().user}

get-process | select processname,Id,@{l="Owner";e={$owners[$_.id.tostring()]}}

seems to return users as requested. You can probably proceed from there. Hope that helps.

answered Feb 09 '11 at 14:33

Jordan W.

1,423
1
13
20

1

Isn't it amazing how easy and simple Powershell is compared to the old out-dated Unix shells? :-) – Andrew J. Brehm Feb 10 '11 at 12:04

score 1 · Answer 2 · answered Aug 29 '15 at 11:37

With PowerShell 4 and newer you can do:

Get-Process -IncludeUserName | Where-Object {$_.UserName -match "peter" -and $_.ProcessName -eq "Notepad"} | Stop-Process -Force

or when using aliases:

ps -IncludeUserName | ? {$_.UserName -match "peter" -and $_.ProcessName -eq "Notepad"} | spps -Force

not as short as in Unix but better than in older PowerShell versions.

With Powershell, how can I get the id of a process owned by a specific user?

2 Answers2