Identify process using a file

Question

I have been trying to figure out how to programmatically identify the process that has a lock on a particular file. I've searched through the Win32 API and WMI, but so far I can't find anything. I know it's possible - Sysinternals is able to list every resource accessed/locked by every process on the system.

Can anyone drop me a hint?

Answer 1

WhoLockMe is a nice right click windows explorer extension.

Answer 2

Please look at http://windowsxp.mvps.org/processlock.htm

Answer 3

I don't know in Windows, but somebody might find useful to know that, in Linux, you can use the lsof command, or just search through the folders /proc/PROCESS_ID/fd and see what process has opened the file.

Answer 4

You can use handle.exe from Sysinternals.

Something like:

> handle /accepteula C:\path\to\directory
...
program.exe           pid: 1234   type: File           2E4: C:\path\to\directory
...

Thanks to https://stackoverflow.com/a/599268/367916 .

Answer 5

You could use Process Explorer from Microsoft

1. Download & unpack & run Process Explorer
2. Click Find menu and then click Find Handle or DLL... or press CTRL + F
3. Copy and paste path to locked folder of file
4. Click Search, you can kill process from main Process Explorer window

Answer 6

This article might be helpful to you.

It appears you are forced to search through the list of files for each process on the system using undocumented functions in ntdll.dll.