Process Explorer not showing details for system processes after update?

Understanding Process Explorer’s Changes Post-Update: A Guide to Restoring Process Details on Windows 10

In the realm of system monitoring and troubleshooting, tools like Process Explorer from Microsoft’s Sysinternals suite are invaluable. However, users may encounter unexpected behavior following software updates, leading to questions about functionality and security details. This article aims to address common concerns regarding Process Explorer’s recent updates, specifically related to the visibility of process details for system processes.

Overview of the Issue

Some users have reported that after updating to the latest version of Process Explorer, certain Windows processes—particularly those related to security such as MsMpEng (Windows Defender), NisSrv, and AppXDeployment—no longer display detailed information like file paths, descriptions, or verified signer status. This change can be puzzling, especially for those accustomed to having comprehensive process insights.

Key Observations:

• The issue predominantly affects system and security-related processes.
• The problem persists across multiple versions of Process Explorer, including older ones from 2020.
• The user has verified system integrity using SFC and DISM tools, confirming no underlying Windows corruption.
• Antivirus scans have returned clean results.
• The problem began after updating Process Explorer, with no recent changes to other system configurations or software.

Factors to Consider

1. Security and Privacy Enhancements:
   Windows and application developers continually update their software to enhance security. Newer versions of Process Explorer may implement stricter policies around process visibility for system or security processes to prevent tampering or provide more cautious default views, especially for processes with high security privileges.

2. Process Whitelisting and Digital Signatures:
   The display of certain process details often depends on verifying digital signatures or matching processes against known whitelists. Changes in how Process Explorer handles signature verification or process information retrieval can affect the display.

3. Permissions and Administrative Rights:
   Running Process Explorer as an administrator typically grants elevated access, but certain system processes might still have restrictions or require additional privileges. Ensuring that you run the tool with the highest possible permissions is advisable.

4. Registry and Configuration Settings:
   Sometimes, program updates may modify or reset configuration settings. Checking Process Explorer’s options and any associated configuration files for visibility or process detail settings can be helpful.

Potential Solutions and Recommendations

• Verify Run as Administrator:
  Ensure you launch Process Explorer with administrative privileges each time. Right-click the executable and select “Run as administrator.”

• **Check Process Display