How to use the Resource Monitor in Windows

One fact of life with Windows is that, every once in awhile, your computer will slow down or freeze, or a program won't work the way you expect it to. Wouldn't it be nice if you had a way of finding out what had gone wrong, and why - whether it's CPU use, memory use, a program behaving badly, or something else? Yes, it would definitely be nice to know all these things and more. And that's why the Resource Monitor exists in Windows. This tutorial will show everything you need to know about this great tool and how to use it:

IMPORTANT: We know it's natural for many people to start playing with new programs without reading the directions first. In most cases that's fine. In the case of Resource Monitor, you can cause all kinds of trouble if you experiment without knowing what you're doing. That's why you'll see some pretty emphatic warnings here. Please heed those warnings.

NOTE: This guide works for Windows 10, Windows 7 and Windows 8.1.

How to start the Resource Monitor in Windows 7

We honestly don't think we've ever encountered a Windows program that offered so many different ways to launch it. Clearly, Microsoft intends the Resource Monitor to be used. There may even be more ways to do it than what we've found, so if you know another gateway to the Resource Monitor, we'd love to hear it! Here are the ways I've found:

Type Resource Monitor or resource into the Start Menu search box, and click on the appropriate search result.

Another way to open the Resource Monitor is to type resmon.exe into the Start Menu search box and press Enter.

Or, you could open the Start Menu and go to "All Programs -> Accessories -> System Tools -> Resource Monitor".

If you prefer using your keyboard, press Ctrl-Shift-Esc or Ctrl-Alt-Del. This action will open the Task Manager. Inside it, go to the Performance tab and click on the Resource Monitor button.

Whichever method you choose, you'll see the Resource Monitor's Overview screen, with a series of constantly changing lists and graphs, giving you a window into what your computer is doing behind the scenes.

How to start the Resource Monitor in Windows 8.1

Unfortunately, finding the Resource Monitor in Windows 8.1 is not an easy task. If you search on the Start screen for resource or resource monitor, you won't get the shortcut to this tool as a search result. But, you can still launch it. If you want to use search, search for its executable file: resmon.exe and click or tap on the only search result that is displayed.

Alternatively, you can first open the new Task Manager. If you don't know how this tutorial will help: 10 Ways to start the Task Manager in Windows 10 and Windows 8.1.

Then, go to the Performance tab. At the bottom of that tab, you will find a link saying "Open Resource Monitor". Click or tap on it.

In Windows 8.1, the Resource Monitor window will look like this:

How to start the Resource Monitor in Windows 10

The fastest way to launch the Resource Monitor in Windows 10 is to use Cortana's search powers. Enter the word resource in the search field from your taskbar, and then click or tap on the Resource Monitor shortcut.

If you prefer, you can also use the Run window in order to launch the Resource Monitor. Open the Run window by pressing the Windows + R keys simultaneously, enter the command resmon in the text field, and then press Enter or OK.

Another way to open the Resource Monitor tool involves the use of the Task Manager. Launch it quickly by pressing simultaneously on the Ctrl + Shift + Escape keys on your keyboard. Then, open its detailed view, select the Performance tab, and click or tap on the Open Resource Monitor shortcut from the bottom of the window.

This is what the Resource Monitor window looks like in Windows 10:

NOTE: Because the Resource Monitor tool looks and works the same in all modern Windows versions - Windows 10, Windows 8.1, and Windows 7 - from here on, we will use screenshots taken only in Windows 10.

OK, the Resource Monitor is open. Now what?

The Overview window shows your CPU activity by default. You can see that there are tabs for Memory, Disk, and Network. In the lower section of the left-hand window, there are collapsed windows for Disk, Network, and Memory (no idea why the order is different, and it doesn't really matter). Clicking on the arrow at the right end of the title bar will expand those lists.

You may want to expand the whole Resource Monitor window to full-screen size so you can see more of what's going on. You can also drag the bottom border of the individual windows on the left to show more or less data at a time.

Each window shows a list of programs that are currently using resources, and the graphs on the right give you a visual representation of the totals. You can change the size of the graphs, by clicking or tapping on the Views button. The default view is "Large."

Watch the changing lists and graphs and see which programs are using your resources. We found it interesting that opera.exe (which is the executable of the Opera web browser) shows up multiple times on our list (each tab with its own executable). However, it's not easy to correlate a jump in the graph with an exact time and set of active resources.

How to monitor CPU usage with Resource Monitor

Let's start by exploring the CPU window, which is the default view. It will be easier to see all the information if you expand the Resource Monitor window to full-screen size (click on the Tile box in the upper right corner). Click on the CPU tab, and you'll find the Processes window expanded. Beneath that, are collapsed windows for Services, Associated Handles, and Associated Modules.

We won't be discussing Associated Handles and Associated Modules in detail. They get populated with data only after you select a running process or service.

For those who want to know what modules and handles are: modules are helper files or programs, such as dynamic-link library (DLL) files used by the process you select, while handles are pointers that refer to system elements such as files, registry keys, events, or directories used by the selected process.

On the right, you'll see graphs of CPU usage that scroll to show you your data in real time. If you have a multicore CPU, the first two graphs show average data for all cores, while the others are independent for each core.

Let's look at the Processes window. On the left, you'll see a list of processes, the PID (process identifier), the name of the process (which is very helpful for identifying what it is), its status (running, or otherwise), its threads (a core element of Windows processes that most people don't have to concern themselves with), CPU (CPU usage right at any one moment) and average CPU (usage averaged over time). If you can't read the column headings or content, grab each column's divider in the title bar and slide them to the right one by one until everything is visible. If you hover the cursor over each column heading, a description of that column will pop up.

If you have any processes that are not responding, their names will show up in red.

What can you do with this list? Like many Windows programs, Resource Monitor lets you sort the contents of the columns in ascending or descending order. Click/tap on the Average CPU list, to sort it with the processes using the most resources at the top. Chances are good you won't see any big resource hogs since most Windows programs are well behaved. But if you should find your computer slowing down unexpectedly, take a look at this column. If something is taking up a lot of CPU resources, you may want to consider shutting it down and restarting it. If you're not sure what something is, right-click (or tap and hold) on the name and choose to Search online from the list. That will pull up a search for you with your default browser and search engine, and you can find out more about what each of those sometimes-cryptic names represents.

If a process shows up in red and its status is "Not Responding" or something similar, you can shut down that process by right-clicking on the process name and choosing "End Process."

WARNING: Do not use "End process" unless you are absolutely sure you know what you're doing. Windows will ask you if you're sure you want to end the process before it shuts it down, but that won't protect you if you say yes to something and you only think you know what's going on. Some processes are interlinked and shutting down only one can wreak havoc on the others. Also, you definitely do not want to end the SYSTEM process or svchost.exe and other Windows processes that are critical to its functioning. When ending processes, make sure you know what they are and what they do.

The Services section is similar to the Processes window. Try expanding it without collapsing the Processes window and take a look. You'll see a list of names that are different from the names in the Processes window, which will also change as you watch. The difference is that these things are running Windows internal services.

If you select one or more of the running processes, the Service window will show only the services associated with those processes. This can be pretty handy information at times.

If you right-click (tap and hold) on a service name, you'll see that you have the option to stop the service, restart it (in case it is malfunctioning but you need to use it) or search for more information about it online.

Learn how the Memory is used by Windows

Next, click or tap on the Memory tab. At the top, you'll see a list of the programs and processes that are using memory space, and at the bottom, a bar graph showing you where and how your available memory is in use. The columns are labeled Hard Faults/sec, Commit, Working Set, Shareable, and Private, each followed by (KB) - meaning memory space in kilobytes.

You probably won't see anything but zeroes in the Hard Faults/sec column. The term "hard fault" is somewhat misleading - it's not really a "fault" in the memory, it's an instance where Windows ran out of space in RAM and had to use the swap file (hard drive space that's set aside by Windows to be used when physical memory runs out). If you do see a lot of hard faults, it's a good indication that you need to buy some more memory for your computer.

The Commit column shows you how much memory space Windows allots for each program by default. The program may or may not be using all of that space. (If your columns are not already sorted, click on this one to show you what's using up the most memory.) The Working Set column shows you how much memory each program is actually using at the moment.

The Shareable column shows you how much of the memory allotted to each program can actually be shared by other programs, and the Private column shows how much of the memory allotted to each program can be used only by that program. If a program shows up as using way too much memory, you can decide to close it.

The bar graph of memory use is self-explanatory and so are the graphs that are shown on the right side of the Resource Monitor window.

What's got the Disk? Monitor the Disk activity

The Disk section, as you probably know, shows you what's using hard drive resources. This can be very useful if your hard drive light stays on and you're not sure why. There are three windows labeled Processes with Disk Activity, Disk Activity, and Storage. Expand them all and take a look. You'll probably also want to expand the column headings so you can see the whole title. In the column headings, "B/sec" stands for "bytes per second."

There is not a lot you can (or should) do with the information in this section. You might be surprised to see how much disk activity your favorite programs require, but again, since Windows programs are usually well behaved, it would be very uncommon for you to see something really going crazy and making your hard drive keep churning away, except for programs used to download files. As with the other Resource Monitor sections, you can right-click (tap and hold) on any name you don't know, and click/tap Search online to get an explanation (this works in the Processes with Disk Activity section only). You can also end those processes from the same right-click menu, but again, that's not recommended unless you know what you are doing. In the Disk Activity section, right-clicking on the names does nothing, so if you're curious about those, you'll have to look them up on your own.

The bottom section, Storage, shows a list of your drives with information on Logical Disk, Physical Disk, Active Time, Available Space, Total Space and Disk Queue Length.

The first few are self-explanatory. "Disk Queue Length" is an indication of how many requests for disk space are waiting to be fulfilled. Unless you're doing something out of the ordinary or you have software that's seriously misbehaving, this column's data will be mostly zeroes. Which is as it should be.

What's using the network and the internet

The final tab is Network. When you open this one, you'll see sections for Processes with Network Activity, Network Activity, TCP Connections, and Listening Ports. The first section is the only one you can do anything with; the others are for your information but you cannot manipulate or change anything in them. TCP Connections and Listening Ports contain information that is useful to more advanced users, with very good networking knowledge, so we won't be talking much about them.

Take a look at the Processes with Network Activity section. Here you'll find a list of programs you're running, that are connecting to your network and to the internet. You probably won't find any surprises here, since it's likely to be a list of browsers, instant-messaging and other apps, network connection processes and programs like Dropbox that rely on cloud storage. If the names are too cryptic, you can use that excellent "Search Online" command from the right-click menu to see what they are.

One very useful thing that you can do in this tab, is to select only one process or a group of processes you are interested in, and the data in the lower sections is automatically filtered, so that you can see the Network Activity, TCP Connections or Listening Ports, only for the selection you made.

The graphs on the right are pretty self-explanatory and show an overview of your network activity, TCP connections, and activity over your local area connection.


The Resource Monitor is an excellent way to open a window into Windows, so to speak. It lets you look at what's going on behind the scenes, and stop the activity that's causing problems. As long as you proceed with caution and don't just play around with things for the sake of playing around, you can learn a lot about what's happening inside your computer and (especially if you spent any time at all dealing with older versions of Windows) you can definitely appreciate how well Windows 10, Windows 8.1 and Windows 7 are designed to work.