December 17, 2009June 29, 2020 how to run procmon as a guest/restricted user The best way is to use runas command: runas /user:test “C:Userstest_restrictedDesktopProcmon.exe”