I want to give statistic or monitor the process killed by users. Any tools can help on this ? I found GPO's audit setting not enough to give me such information. Pls help !! thx !!

If you're looking at it from a Diagnostic standpoint take a look at what's available through Event Tracing For Windows: http://technet.microsoft.com/en-us/library/cc766404 you can generate regular reports that include process creation and termination. It may not quite give you what you're looking for if you are hoping for detail around 'user A clicked close' but you can see the creation and termination of processes on a timeline when viewed with an analysis tool like those included in the free Windows Performance Toolset: http://msdn.microsoft.com/en-us/performance/cc825801.aspxDoug Kentner

If you're looking at it from a Diagnostic standpoint take a look at what's available through Event Tracing For Windows: http://technet.microsoft.com/en-us/library/cc766404 you can generate regular reports that include process creation and termination. It may not quite give you what you're looking for if you are hoping for detail around 'user A clicked close' but you can see the creation and termination of processes on a timeline when viewed with an analysis tool like those included in the free Windows Performance Toolset: http://msdn.microsoft.com/en-us/performance/cc825801.aspxDoug Kentner