Leveraging WMI Scripting 

1 2

• 1. Table of Contents

• 2. BackCover

• 3. Leveraging WMI Scripting - Using Windows Management Instrumentation to Solve Windows Management Problems

• 4. Foreword

• 5. Preface

• 6. Some Useful Scripts

• 7. Chapter 1: The Windows WMI Providers Discovery

  1.1 Objective

• 8. 1.2 The WMI provider types

  1.2 The WMI provider types

• 9. 1.3 WMI providers discovery

  crystal reports ado.net empty class name

• 10. 1.4 Helpers for the discovery

  1.4 Helpers for the discovery

• 11. 1.5 Summary

  1.5 Summary

• 12. Chapter 2: The Win32 Providers

  2.1 Objective

• 13. 2.2 The Win32 providers

  2.2 The Win32 providers

• 14. 2.3 Computer system hardware classes

  Win32_PrinterDriver + AddPrinterDriver + 112 vbscript wmi pnpentity compatible id query

• 15. 2.4 Operating System classes

  changing the timezone remotely+wmi+C#.net+location of server+win32_timezone Win32_DCOMApplicationAccessAllowedSetting reference vbs Writing SPN and DnsHostName attributes on the computer object should be deferred until the rename that follows the join

• 16. 2.5 Summary

  2.5 Summary

• 17. Chapter 3: The WMI Providers

  3.1 Objective

• 18. 3.2 The WMI providers

  3.2 The WMI providers

• 19. 3.3 Core OS components providers

  PolicyReplicationConsumerProvider wmi 63 error

• 20. 3.4 Core OS components event providers

  3.4 Core OS components event providers 3.4.1 The Clock provider 3.4.2 Power management provider 3.4.3 Shutdown provider 3.4.4 Configuration Change provider 3.4.5 Volume Change event provider

• 21. 3.5 Core OS file system components providers

  power shell wbemImpersonationLevelImpersonate Win32_ShadowStorage win32_shadowcopy vbs

• 22. 3.6 Active Directory components providers

  select * from _InstanceModificationEvent within 10 where TargetInstance isa Windows Server 2003 cannot authenticate remote desktop connection domain accounts to Samba 3.54

• 23. 3.7 Network components providers

  Opera/9.80 (Windows NT 5.1, U, en) Presto/2.7.62 Version/11.01 what is the 1st subnet if the ip address of 193.10.10.0 Opera/9.80 (Windows NT 5.1, U, de) Presto/2.8.131 Version/11.10

• 24. 3.8 Performance providers

  Win32_PerfFormattedData Tcpip NBT Connection javascript check ram.wsf SWbemRefresher: Invalid class Win32_PerfFormattedData_PerfDisk_LogicalDisk returns null on Windows 2003 vbscript performance wmi system cache physical memory cooking type Win32_PerfRawData_Tcpip_NetworkInterface Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox has no data wmic path Win32_PerfFormattedData_TCPIP_NetworkInterface get name windows 2000 how bandwidth is calculated WMI interval

• 25. 3.9 Helper providers

  3.9 Helper providers 3.9.1 The View provider 3.9.2 The Forwarding consumer provider 3.9.3 The Event Correlator providers

• 26. 3.10 Summary

  3.10 Summary

• 27. 3.11 Useful Internet URLs

  3.11 Useful Internet URLs

• 28. Chapter 4: WMI Security Scripting

  4.1 Objective

• 29. 4.2 The WMI security configuration

  4.2 The WMI security configuration 4.2.1 The WMI connection security settings 4.2.2 The group membership

• 30. 4.3 WMI and Active Server Page (ASP)

  4.3 WMI and Active Server Page (ASP) 4.3.1 Authentication settings 4.3.2 Customizing IIS 5.0 and above

• 31. 4.4 WMI security descriptor management

  4.4 WMI security descriptor management 4.4.1 The security descriptor WMI representation 4.4.2 How to access the security descriptor 4.4.3 The security descriptor ADSI representation 4.4.4 Which access technique to use? Which security descriptor representation do we obtain?

• 32. 4.5 The WMI Security provider

  4.5 The WMI Security provider

• 33. 4.6 Connecting to the manageable entities

  4.6 Connecting to the manageable entities 4.6.1 Connecting to file and folder security descriptors 4.6.2 Connecting to file system share security descriptors 4.6.3 Connecting to Active Directory object security descriptors 4.6.4 Connecting to Exchange 2000 mailbox security descriptors 4.6.5 Connecting to registry keys security descriptor 4.6.6 Connecting to CIM repository namespace security descriptors

• 34. 4.7 Accessing the security descriptor set on manageable entities

  GetSecurityDescriptor __SystemSecurity example

• 35. 4.8 Creating a default security descriptor

  4.8 Creating a default security descriptor

• 36. 4.9 The security descriptor conversion

  SecurityDescriptor+API WIN32+sample code

• 37. 4.10 Deciphering the security descriptor

  4.10 Deciphering the security descriptor 4.10.1 Deciphering the WMI security descriptor representation 4.10.2 Deciphering the ADSI security descriptor representation

• 38. 4.11 Deciphering the security descriptor components

  wmi scripting library SecurityDescriptor vba msExchprivateMDB attributes adminDescription active directory userAccountControl sAMAccountType msExchExchangeServerPolicy

• 39. 4.12 Modifying the security descriptor

  4.12 Modifying the security descriptor 4.12.1 Updating the security descriptor Owner 4.12.2 Updating the security descriptor Group 4.12.3 Updating the security descriptor Control Flags 4.12.4 Adding an ACE 4.12.5 Removing an ACE 4.12.6 Reordering ACEs

• 40. 4.13 Updating the security descriptor

  4.13 Updating the security descriptor 4.13.1 Updating file and folder security descriptors 4.13.2 Updating File System share security descriptors 4.13.3 Updating Active Directory object security descriptors 4.13.4 Updating Exchange 2000 mailbox security descriptors 4.13.5 Updating registry key security descriptors with ADSI 4.13.6 Updating CIM repository namespace security descriptors with WMI

• 41. 4.14 How WMI scripters are affected by the Microsoft security push

  4.14 How WMI scripters are affected by the Microsoft security push 4.14.1 Asynchronous scripting 4.14.2 Setting the security descriptor of a CIM repository namespace 4.14.3 The ADSI WMI Extension 4.14.4 The Windows Authorizations Access Group (WAAG)

• 42. 4.15 Summary

  4.15 Summary

• 43. Chapter 5: The Optional Windows Components and Application WMI Providers

  5.1 Objective

• 44. 5.2 WMI and some additional Windows services

  MSNDIS_MediaConnectStatus filter miniport wmic MSCluster_ResourceGroup BringOnline

• 45. 5.3 WMI and some (server) products

  MessageTrackingEntry where recipientaddress= Select * From IIsWebServer Where Name = W3SVC remove

• 46. 5.4 WMI and some Windows applications

  5.4 WMI and some Windows applications 5.4.1 Microsoft Office 5.4.2 Internet Explorer

• 47. 5.5 WMI and some Enterprise Management software

  5.5 WMI and some Enterprise Management software 5.5.1 Insight Management Agents 5.5.2 Microsoft Operation Manager 5.5.3 HP OpenView Operations for Windows

• 48. 5.6 WMI and the .NET Framework

  5.6 WMI and the .NET Framework 5.6.1 The .NET Framework WMI information access 5.6.2 Accessing WMI information from Visual Studio.NET 5.6.3 Accessing WMI information from a .NET language

• 49. 5.7 Summary

  5.7 Summary

• 50. 5.8 Useful Internet URLs

  5.8 Useful Internet URLs

1 2