I know process monitor and some of the other sysinternals tools load a driver that you can see if you run :
Cmd (run as administrator) Set devmgr_show_nonpresent_devices=1 Devmgmt.msc Then select show hidden devices And expand the node for "non plug and play drivers". For example, it might say "PROCEXP113" for the device. My best guess is that the user account you're logged on with might somehow not have permission to load this type of driver, maybe via a GPO or other configuration? Or, I've seen older versions of the app leave behind drivers too-it might need to be removed, rebooted, and tried again. From: David Lum [mailto:david....@nwea.org] Sent: Wednesday, February 23, 2011 9:00 AM To: NT System Admin Issues Subject: Process Monitor on 2008 R2? According to Systernals, this tool should work on XP and later and Server 2003 and higher, but I on an RDS server (2008 R2) get "unable to load Process Monitor device driver" even when right-clicking and selecting "Run as Administrator". Perusing Systernals (aka Microsoft) forums I find no solution for my specific scenario. David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 503.548.5229 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
