One short thing on processes: How do retreive the "User Name" information for a process. Here is what taksmanager says about it:
The name of the user whoes terminal services session owns the process. The counter is available only when terminal services is installed.
This is typically "LOCAL SERVICE", "SYSTEM", UserName or NETWORK SERVICE. I couldn't find it on msdn, even under "Obtaining Additional Process Information"