Finding Application Pool name from w3wp.exe PID
Recently I handled a case that process "IIS Worker Process" (c:\windows\system32\inetsrv\w3wp.exe) continueously writing to a log file in c:\temp\tracing/log, this was found using process monitor. I wanted to narrow down what application pool exactly writes this log file and below information was provided by MSFT. http://blogs.msdn.com/b/jb/archive/2006/02/22/536693.aspx C:\WINDOWS\system32>cscript iisapp.vbs Microsoft (R) Windows Script Host Version 5.6 Copyright (C) Microsoft Corporation 1996-2001. All rights reserved. W3WP.exe PID: 15924 AppPoolId: DefaultAppPool I found the application pool id as "DefaultAppPool" Another process Content Index service (C:\WINDOWS\system32\cisvc.exe) was writing to C:\inetpub\catalog.wci\0010002.ci and the solution was Indexing Service supposed to be disabled as standard in the environment :)