Software Deployment

1. Forget FileMon and RegMon and move on to their successor, ProcMon. It is *light years* ahead in functionality and has no restriction (that I've hit, anyway) on the number of exclusions you can add, unlike FM and RM, where the limit is the number of unique names you can fit into 254 characters (the limit is imposed by the maximum length of a Windows text box's text).

2. Think about the resources which these tools have to access. Does that answer your question?

Yes VBScab is right. ProcMon is simple toll with the combination of both FileMon and Regmon .

The File-, Reg- and ProcMon loads a filterdriver during launch which requires admin permissions