“Cortana is using CPU” is a report, not a diagnosis. Under that label hide three different processes, half a dozen possible triggers, and fixes ranging from a settings toggle to a full index rebuild. Troubleshooting it properly means identifying which component is hot, when it’s hot, and what it’s working on — then applying the fix that matches.
This guide is the systematic version: no registry-deleting folklore, no “just disable everything” advice. You’ll trace the actual process, run isolation tests, and fix the root cause so it stays fixed.
Why this happens
- SearchIndexer grinding a backlog: Large file additions, updates, or new user profiles trigger extended indexing runs.
- High-churn folders in the index: Sync clients, build outputs, and download folders keep the indexer perpetually busy.
- Corrupt search database: Damaged index entries cause retry loops that never complete.
- SearchHost web-search overhead: Bing integration adding network + render work to every Start menu query.
- Legacy Cortana background tasks: Scheduled tasks and background permissions from the assistant era still firing.
- Permission-denied paths: The indexer repeatedly attempting folders it can’t read.
- Third-party search API abuse: Apps or widgets querying Windows Search in a tight loop.
How to fix it
Work through these in order — diagnose first, then act.
Fix 1: Attribute the CPU to the right process
Precision here determines everything downstream.
- Open Task Manager > Details tab, sort by CPU descending, and locate SearchIndexer.exe, SearchHost.exe, SearchProtocolHost.exe, and any Cortana-named process. Record each one’s CPU %.
- Right-click each > Open file location to verify legitimacy (they should live under Windows system directories).
- Open Resource Monitor (search Start) > CPU tab, check the box for the hot process, and look at Associated Handles — the file paths shown reveal what it’s working on right now.
- Determine the temporal pattern: constant (loop/corruption), post-boot spike settling in an hour (backlog), or spikes during file activity (churn). Log 10 minutes of observation.
- If the machine is slow overall and not just in search, work through speeding up a slow Windows 11 laptop alongside this guide.
Fix 2: Pause indexing as a diagnostic
One toggle tells you whether the indexer is the whole story.
- Open Settings > Privacy & security > Searching Windows > Advanced indexing options.
- Click Pause (or set the indexer’s schedule). Alternatively, open
services.msc, find Windows Search, and Stop the service temporarily. - Watch Task Manager for 5 minutes. If the mystery CPU vanishes the moment indexing stops, you’ve confirmed the diagnosis: it’s indexing workload, full stop.
- Restart the service afterward (set it back to Automatic) — the goal is diagnosis, not permanently killing search.
- Now the question narrows to what it’s indexing so relentlessly — proceed to Fix 3 with that focus.
Fix 3: Find the folder that’s keeping it busy
The indexer’s workload comes from somewhere — find it.
- With indexing running, open Resource Monitor > Disk tab and filter by SearchIndexer.exe / SearchProtocolHost.exe in the processes list.
- Watch the Disk Activity section: the file paths being read reveal exactly which folders the indexer is crawling right now.
- Common offenders: cloud sync roots mid-sync,
Downloadswith thousands of files, developer project folders with build artifacts, and email data files being re-crawled. - Go to Indexing Options > Modify and uncheck the offending locations. For sync folders, let the sync finish first, then decide whether they belong in the index at all.
- For folders you need indexed but that churn constantly, consider when indexing runs: the indexer respects the Respect power settings option — pausing on battery — which at least confines the CPU cost to plugged-in time.
Fix 4: Rebuild and repair the search database
Corruption is the classic cause of never-ending indexer CPU.
- Indexing Options > Advanced > Rebuild. Accept the warning and let it run — expect heavy CPU during the rebuild itself (temporary and normal).
- While it rebuilds, keep the laptop on AC power and avoid massive file operations that add to the backlog.
- After “Indexing complete” appears, monitor for a full day of normal use. Sustained low CPU = corruption was the cause.
- If CPU climbs again within days, run the Search and Indexing troubleshooter (Settings > System > Troubleshoot > Other troubleshooters) — it detects permission and configuration issues a rebuild can’t fix.
- Check Event Viewer > Applications and Services Logs > Microsoft > Windows > Search for repeated error entries naming specific paths — those paths need exclusion or permission repair.
Fix 5: Disable web search and legacy Cortana components
Trim the SearchHost workload and silence the remnants.
- Registry method (all editions): open
regedit, go toHKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer, create DWORDDisableSearchBoxSuggestions=1to kill web suggestions in search. - For the machine-wide policy:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search> DWORDAllowCortana=0andDisableWebSearch=1(create keys as needed; export a backup first via File > Export). - Pro users can use
gpedit.msc> Computer Configuration > Administrative Templates > Windows Components > Search > set Allow Cortana and Don’t search the web appropriately. - In Task Scheduler (taskschd.msc), browse Microsoft > Windows > Windows Search and review scheduled tasks — disable any legacy Cortana-related maintenance tasks you find.
- Reboot, then verify: Start menu search should be fast and local-only, and no Cortana-named process should auto-start. Full policy documentation is at Windows support .
Fix 6: Handle the edge cases
For the stubborn remainder that survives the standard fixes.
- Outlook/email indexing: If you use classic Outlook with huge PST/OST files, the indexer crawls them relentlessly — in Indexing Options > File Types, consider unchecking
msg/ostcontent indexing, or let Outlook’s own search handle mail. - Permission loops: Folders the indexer can’t read generate endless retries — take ownership or grant SYSTEM read access to user data folders, or exclude them.
- Third-party API abuse: Use Process Explorer to check which processes hold handles to the search service; a misbehaving app spamming queries shows up as constant SearchHost CPU correlated with that app’s activity.
- Clean up startup per disabling startup programs — fewer auto-started apps means fewer file changes for the indexer to chase at boot.
- Final verification: 24 hours after all fixes, SearchIndexer should sit at 0% CPU at idle with occasional small spikes during real file activity. Anything else means a remaining trigger — repeat Fix 3’s Resource Monitor investigation.
Closing
Troubleshooting Cortana CPU is really troubleshooting Windows Search: attribute the load to the right process, prove it’s indexing with the pause test, find the busy folders, and repair or reconfigure from there. The systematic path takes a little longer than folk remedies, but it ends with search that works and a CPU that’s quiet.
