owstimer.exe

Microsoft SharePoint Timer Service

System ProcessSafeSharePoint Timer
CPU Usage
2-15%
Memory
100-400 MB
Location
C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\OWSTIMER.EXE
Publisher
Microsoft Corporation

Quick Answer

owstimer.exe is safe. It's the Microsoft SharePoint Timer Service executable that coordinates and runs farm timer jobs, backups, indexing, and maintenance tasks across the farm as configured.

Is it a Virus?
 NO - Safe
Must be in C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\OWSTIMER.EXE
Can I Disable?
 YES - There will be no scheduled timer jobs until re-enabled; this can impact farm maintenance.
Disabling the SharePoint Timer Service will stop all scheduled timer jobs, including backups, indexing, and workflow processing.

What is owstimer.exe?

owstimer.exe is the SharePoint Timer Service executable responsible for scheduling and executing timer jobs across a SharePoint farm. It runs as a Windows service on each server, coordinating backup tasks, search indexing, workflow timers, and maintenance activities based on central configuration. This background service is essential for farm reliability.

OWSTIMER.EXE operates under the SharePoint timer service framework, launching job definitions stored in the configuration database and invoking worker tasks via the timer job framework. It communicates with Central Administration to orchestrate scheduled work.

Quick Fact: OWSTIMER.EXE can run multiple timer jobs in parallel across servers, enabling coordinated maintenance without requiring user interaction.

Types of OWSTIMER Processes

Is owstimer.exe Safe?

Yes, owstimer.exe is safe when it's the legitimate Microsoft SharePoint Timer Service executable located in the SharePoint installation folder.

Is owstimer.exe a Virus or Malware?

The real owstimer.exe is not a virus. However, malware can masquerade with similar names. Always verify digital signatures and location.

How to Tell if owstimer.exe is Legitimate or Malware

  1. File Location:: Must be in C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\OWSTIMER.EXE or C:\\Program Files\\Common Files\\Microsoft Shared\\Web Server Extensions\\15\\BIN\\OWSTIMER.EXE.
  2. Digital Signature:: Right-click the file at OWSTIMER.EXE → Properties → Digital Signatures. Should show Microsoft Corporation.
  3. Resource Usage:: Normal usage is 2-15% CPU with 100-400 MB RAM. Extremely high usage when idle or on a server with no farm activity is suspicious.
  4. Behavior:: OWSTIMER.EXE should run as a Windows service; if it starts unexpectedly or outside scheduled tasks, investigate for malware.

Red Flags: If owstimer.exe is located outside the SharePoint BIN folder (for example in a user Temp or AppData path), runs when no timer jobs are scheduled, or lacks a valid signature, run a malware scan immediately. Look for similarly named files like \"owstimer.exe\" variants from untrusted sources.

Why Is owstimer-exe Running on My PC?

owstimer.exe runs as part of the SharePoint Timer Service to schedule and execute farm timer jobs on each server. It starts automatically on server boot or when the service is started and manages background maintenance tasks across the farm.

Reasons it's running:

Can I Disable or Remove owstimer.exe?

Yes, you can disable owstimer.exe. However, disabling the SharePoint Timer Service stops all scheduled farm tasks (backups, indexing, workflow processing) and can impact farm availability and maintenance windows.

How to Stop owstimer.exe

How to Uninstall OWSTIMER

Common Problems: Timer Service High CPU or Backlog

If owstimer.exe is consuming excessive resources or misbehaving, use these common problem patterns and recommended fixes for SharePoint Timer Service.

Common Causes & Solutions

Quick Fixes:
1. Open the SharePoint Timer Job Monitoring in Central Administration to identify long-running jobs.
2. Reduce backlog by running pending jobs during maintenance windows.
3. Restart the OWSTIMER service if required after applying updates.

Frequently Asked Questions

What is owstimer-exe?

OWSTIMER.EXE is the SharePoint Timer Service; it orchestrates scheduled farm tasks. It resides in the BIN folder of the SharePoint installation: typically C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\16\BIN\OWSTIMER.EXE.

Is Owstimer.exe a virus?

No, owstimer.exe is not a virus when it appears in the expected SharePoint BIN path and has a Microsoft Digital Signature. Verify location and signature to be safe.

Can I disable owstimer.exe?

Yes, you can disable owstimer.exe by stopping the SharePoint Timer Service, but this will stop timer-driven tasks like backups and indexing.

Why is owstimer.exe using so much CPU?

High CPU usage from OWSTIMER usually means timer jobs are running or a backlog is forming. Check Central Administration > Monitoring > Review Timer Jobs and consider restarting the service during maintenance.

How do I restart owstimer.exe?

To restart or verify owstimer.exe, use Services.msc to restart the 'Microsoft SharePoint Timer Service' (OWSTIMER). You can also recycle SharePoint timer jobs from Central Administration.

Can I remove owstimer.exe?

Owstimer is integrated with SharePoint; it is not typically removed independently. To remove it, uninstall the SharePoint Server role; otherwise, disable the service to stop timer activity.

Related Processes