Top Nav

What is MMC.exe and Why is it Running?

If you found MMC.exe running on your system and you want to know what it is, you’ve come to the right place. MMC.exe is a Microsoft created file that is built-in to every version of Windows since 2000. This process is safe and shouldn’t be causing any problems under normal circumstances. No need to delete or freak out thinking it’s a virus or malware.

Windows Task Manager mmc.exe

MMC, also known as “Microsoft Management Console”, uses host component object models known as snap-ins. These constitute various management snap-ins accessed from the Control Panel, such as the Device Manager. These management snap-ins often provide a graphical user interface for making manual changes to the Windows Registry. Below is a list of some of the snap-ins common in Windows 2000 through Windows 8. Most of these can be launched by directly typing them into the Start Menu or a Run dialog (Windows + R).

    • comexp.msc
    • certmgr.msc
    • ciadv.msc
    • compmgmt.msc
    • devmgmt.msc
    • dfrg.msc
    • diskmgmt.msc
    • eventvwr.msc
    • fsmgmt.msc

  • lusrmgr.msc
  • ntmsmgr.msc
  • ntmsoprq.msc
  • perfmon.msc
  • rsop.msc
  • secpol.msc
  • services.msc
  • wmimgmt.msc
  • gpedit.msc

 

If you are not currently running a snap-in, it is unlikely that MMC.exe will even be running. MMC snap-in dll links are stored in the Windows registry at:

  • HKEY_LOCAL_MACHINE\Software\Microsoft\MMC\SnapIns

Microsoft Management Console registry keys

Conclusion

MMC.exe is a core administrative process of Windows that should only be running when a related Component Obect Model – aka “snap-in” – is running.  This process is built-in to every modern version of Windows and shouldn’t be causing any problems. However, if you are not running a snap-in and see this process in the Task Manager there is a chance that it is a virus disguising itself as an otherwise legitimate service.

, , ,

3 Responses to What is MMC.exe and Why is it Running?

  1. Steve January 3, 2014 at 8:02 am #

    Good article, but your last sentence is much too important to leave to the end. I almost clicked ok on the pop up “mmc.exe” after reading most of your article, then I saw the last sentence and suspect it is malware. Suggestion: Move the last sentence up to the second or third graf.

  2. Michael February 11, 2014 at 2:51 pm #

    And a Snap-In is a ….?
    Never mind, I’ll look that up. Tks for the articles though.

  3. Tom September 13, 2014 at 6:25 am #

    I am trying to get rid of conduit stuff (CltMngSvc, cltmgn.exe, etc.). When I start to run mmc.exe, I get a dialog that asks whether I want to run this application from Unknown Publisher. So, I am suspecting my mmc.exe has been hijacked, too. I feel like if I am about to run a Microsoft mmc.exe that the Publisher would not be Unknown but would be Microsoft. Am I wrong? Does everyone get Unknown Publisher when trying to run mmc.exe? Thank You!

Leave a Reply