Public Function GetProcessUserName(ByVal ProcessID As Long) As String
 
   Dim hProcessID As Long
   Dim hToken As Long
   Dim res As Long
   Dim cbBuff As Long
   Dim tiLen As Long
   Dim TG As TOKEN_GROUPS
   Dim TU As TOKEN_USER
   Dim SIA As SID_IDENTIFIER_AUTHORITY
   Dim lSid As Long
   Dim cnt As Long
   Dim sAcctName1 As String
   Dim sAcctName2 As String
   Dim cbAcctName As Long
   Dim sDomainName As String
   Dim cbDomainName As Long
   Dim peUse As Long
 
   tiLen = 0
 
   hProcessID = OpenProcess(PROCESS_QUERY_INFORMATION Or PROCESS_VM_READ, 0, _
     ProcessID)
 
   If hProcessID <> 0 Then
 
      If OpenProcessToken(hProcessID, TOKEN_READ, hToken) = 1 Then
 
         res = GetTokenInformation(hToken, TokenUser, TU, tiLen, cbBuff)
 
         If res = 0 And cbBuff > 0 Then
 
            tiLen = cbBuff
            res = GetTokenInformation(hToken, TokenUser, TU, tiLen, cbBuff)
 
            If res = 1 And tiLen > 0 Then
 
               SIA.Value(5) = SECURITY_NT_AUTHORITY
 
               res = AllocateAndInitializeSid(SIA, 2, _
                 SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_USERS, 0, 0, 0, _
                 0, 0, 0, lSid)
               If res = 1 Then
 
                  sAcctName1 = Space$(255)
                  sDomainName = Space$(255)
                  cbAcctName = 255
                  cbDomainName = 255
                  res = LookupAccountSid(vbNullString, lSid, sAcctName1, _
                    cbAcctName, sDomainName, cbDomainName, peUse)
 
                  If res = 1 Then
 
                        sAcctName2 = Space$(255)
                        sDomainName = Space$(255)
                        cbAcctName = 255
                        cbDomainName = 255
 
                        res = LookupAccountSid(vbNullString, TU.User.Sid, _
                          sAcctName2, cbAcctName, sDomainName, cbDomainName, _
                          peUse)
                        GetProcessUserName = Replace(Trim(sAcctName2), Chr(0), _
                        "")
 
                  End If
                  FreeSid ByVal lSid
               End If
               CloseHandle hToken
            End If
         End If
      End If
      CloseHandle hProcessID
   End If
End Function

Gru?

Ralf