ProcMon (Windows)

To get an idea of what programs are accessing your file, please grab a ProcMon trace and send it over for review. 

Download: https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

You can extract this in the Downloads folder and run it from there. The Agent may have provided a path to check; if not, we will want to scan the domains folder and the root install folder in general. Run procmon.exe as an Administrator 

Here, you will want to add the filters. 

When you click "Ok" the process will start. The first thing to do is to stop the capture and drop filtered events. 

Here are some alternative filters you can add if requested. ( Only do this if we request it of you please. )

When done, you can go to File > Save. The default options are good. When done, zip up the results and send them over in the open ticket you have with support.