Find out which process is blocking a container from being unmounted?

[Mark]

Hi,

Sometimes, even though all programms using files stored in a VeraCrypt container have been closed, Windows still has something locked within the container. Sometimes it is a handle by explorer.exe, sometimes Outlook.exe not closing completely and having to be shut down with the task manager, etc.

Is there any way to find out which process is blocking a container from being unmounted, so I can look into the task manager for this process?

I know about Process Explorer, but on some of the systems it is not installed, so it would be great to have a solution using Windows 10's on board tools.

Any help would be much appreciated.

Many thanks in advance
and best wishes

Mark

[Mark]

PS: Could the event viewer be of help? It can for example check what blocked USB devices from being safely unmounted (go to Windows logs, System, then click "Filter current logs" and in the field stating "all event ids" enter 225.

Then the action panel will display all unsuccesful dismounts.

However, it does not show unsuccessful VeraCrypt unmount.

Is there a code I could use to filter for those?