Last updated
This applet dumps the contents of the pending rename/delete value and also reports an error when the source file is notaccessible.
$ winget install --id Microsoft.Sysinternals.PendMoves --exact --version 1.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
There are several applications, such as service packs and hotfixes, that must replace a file that's in use and is unable to. Windows therefore provides the MoveFileEx API to rename or delete a file and allows the caller to specify that they want the operation to take place the next time the system boots,before the files are referenced. Session Manager performs this task by reading the registered rename and delete commands from the HKLM\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations value.
PendMoves Usage:
This applet dumps the contents of the pending rename/delete value and also reports an error when the source file is notaccessible.
Usage: pendmoves
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
1 known CVE via NVD
Sysinternals Process Monitor for Windows Denial of Service Vulnerability
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr.
More from Sysinternals or browse sysinternals.