{"id":5637,"date":"2017-10-25T18:33:46","date_gmt":"2017-10-25T13:03:46","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=5637"},"modified":"2019-05-12T02:52:04","modified_gmt":"2019-05-12T02:52:04","slug":"process-monitor-unable-to-write-procmon23-boot-logging","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/process-monitor-unable-to-write-procmon23-boot-logging\/","title":{"rendered":"Process Monitor “Unable to write PROCMON23.SYS” Enabling Boot Logging"},"content":{"rendered":"

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry<\/a> and process\/thread<\/a> activity<\/a>. It can also trace the entire boot process and save to a PML log file. When enabling the setting “Enable Boot Logging” from the Options menu in Process Monitor, the following error may pop up:<\/p>\n

\"\"<\/p>\n

\n

Unable to write PROCMON23.SYS.<\/p>\n

Make sure that you have permission to
\nwrite to the %%SystemRoot%%\\System32\\Drivers directory.<\/p>\n<\/div>\n

This error is seen especially on Windows 10 computers, and there is a simple workaround for this problem without requiring any reboot.<\/p>\n

Note that you’ll be unable to delete PROCMON23.SYS<\/code> as it’s in use by the Operating System.<\/p>\n

\"Unable
PROCMON23.SYS file in use<\/figcaption><\/figure>\n

Solution<\/h3>\n

To fix the error, all you need to do is rename the file PROCMON23.SYS<\/code> (to PROCMON23-OLD.SYS<\/code> or something) in the C:\\Windows\\System32\\Drivers<\/code> folder.<\/p>\n

\"Unable<\/p>\n

\"Unable
Error “Unable to write PROCMON23.SYS” when enable boot logging in ProcMon<\/figcaption><\/figure>\n

You should be able to enable boot logging now. Process Monitor again creates a new PROCMON23.SYS<\/code> in the drivers<\/code> directory.<\/p>\n

Note that this is not a permanent solution, as you’ll need to repeat the steps every time (at least in Windows 10 systems) when you enable boot logging in Process Monitor.<\/p>\n","protected":false},"excerpt":{"rendered":"

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process\/thread activity. It can also trace the entire boot process and save to a PML log file. When enabling the setting “Enable Boot Logging” from the Options menu in Process Monitor, the following error may pop up:<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[6,8],"tags":[191,414],"class_list":["post-5637","post","type-post","status-publish","format-standard","hentry","category-utilities","category-windows-10","tag-error-messages","tag-process-monitor"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":76091,"url":"https:\/\/www.winhelponline.com\/blog\/boot-trace-process-monitor\/","url_meta":{"origin":5637,"position":0},"title":"How to Run a Boot Trace Using Process Monitor","author":"Ramesh","date":"July 25, 2024","format":false,"excerpt":"Process Monitor is an excellent diagnostic tool from Microsoft Sysinternals. It can run a trace during the current Windows session or trace the boot process. Let's see how to enable boot tracing using Process Monitor. Enable Boot Logging using Process Monitor Download Process Monitor and run it. Read and accept\u2026","rel":"","context":"In "Utilities"","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"Process monitor boot logging","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/procmon-boot-log-9.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/procmon-boot-log-9.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/procmon-boot-log-9.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/procmon-boot-log-9.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":78009,"url":"https:\/\/www.winhelponline.com\/blog\/0xc0000142-cmd-powershell-sfc-dism\/","url_meta":{"origin":5637,"position":1},"title":"Error 0xC0000142 Launching CMD, PowerShell, SFC, or DISM","author":"Ramesh","date":"March 2, 2025","format":false,"excerpt":"When you start PowerShell or Command Prompt, the error code 0xc0000142 may appear. Any console tool, such as sfc.exe or dism.exe may throw the same error. The application was unable to start correctly (0xc0000142). Click OK to close the application. SIMILAR: [Fix] Error 0xc0000017 when running DISM or SFC Cause\u2026","rel":"","context":"In "Windows 10"","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"0xc0000142 error when launching cmd.exe or powershell.","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2025\/03\/0xc0000142-cmd-powershell.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":2149,"url":"https:\/\/www.winhelponline.com\/blog\/process-monitor-track-access-denied-registry-file-events\/","url_meta":{"origin":5637,"position":2},"title":"How to Track “Access Denied” Registry and File Events Using Process Monitor","author":"Ramesh","date":"March 17, 2016","format":false,"excerpt":"A well-written application does proper error handling, notifying the user in detail about the error it countered and how to go about fixing it, rather than failing silently or throwing up an obscure error code and quitting. This post tells you how to trace \"Access Denied\" events for file and\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/w10\/p-mon-1.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":19471,"url":"https:\/\/www.winhelponline.com\/blog\/cannot-import-reg-not-all-data-was-successfully\/","url_meta":{"origin":5637,"position":3},"title":"Cannot import .REG file; Not all data was successfully written to registry","author":"Ramesh","date":"October 22, 2020","format":false,"excerpt":"Sometimes, when applying the registry settings using a .reg file, you may get one of the following errors: Cannot import file.reg: Not all data was successfully written to the registry. Some keys are open by the system or other processes, or you have insufficient privileges to perform this operation. Cannot\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"cannot import .reg file - error accessing registry","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/reg-file-import-error-4.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":19688,"url":"https:\/\/www.winhelponline.com\/blog\/compressed-zip-folder-error-file-not-found-no-read-permission\/","url_meta":{"origin":5637,"position":4},"title":"Compressed (Zipped) Folder Error “File not found or no read permission”","author":"Ramesh","date":"November 4, 2020","format":false,"excerpt":"When you try to create a compressed (zipped) folder in Windows 10, the following error occurs: Compressed (zipped) Folders Error File not found or no read permission. You may have noticed that this error doesn't happen on drives formatted as FAT32.\u00a0This article explains why this problem occurs and how to\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"compressed folder create error - no read permissions - process explorer","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/11\/procexp-find-locked-files.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/11\/procexp-find-locked-files.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/11\/procexp-find-locked-files.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":988,"url":"https:\/\/www.winhelponline.com\/blog\/process-monitor-track-events-generate-log-file\/","url_meta":{"origin":5637,"position":5},"title":"Using Process Monitor to Track Registry and File System Changes","author":"Ramesh","date":"February 1, 2009","format":false,"excerpt":"Process Monitor is an excellent troubleshooting tool from Windows Sysinternals that displays the files and registry keys that applications access in real-time. The results can be saved to a log file, which you can send to an expert for analyzing a problem and troubleshooting it. This article tells you how\u2026","rel":"","context":"In "Windows"","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"ProcMon PML log","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/02\/procmon-save-log.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/5637","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=5637"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/5637\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=5637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=5637"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=5637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}