I manage some Win2008R2 servers on the network for my department. Each server usually has 10 - 20 users at a time connected to it. They are nothing more than locked down file servers on the domain.
Even though they are beefy servers sometimes a user will do something which slams the IO on the server or the processor (such as copy a file over that is several GB and psexec command line unzip it).
While I do not have a choice per my boss to further restrict rights, I do need to monitor & report it when people abuse the servers like this and have leeway to boot their sessions.
Currently I keep the Computer management console remotely connected to the servers and page through them about once every 15 min on the session tabs to see if anyone has a ton of files open, but that doesn't help determine when someone is spiking the processor. I know about that Resource monitor, but it doesn't tell me who is spiking IO/Processor.
Can someone provide a built in / easy method to be able to determine from am MMC who's sessions are causing the issue?