Using "within" in a WMI event query

What happens when we don’t specify a “within” interval in a WQL notification query with an intrinsic event class name? For example: SELECT * FROM __InstanceCreationEvent             WHERE TargetInstance ISA ‘Win32_NTLogEvent’ AND             TargetInstance.LogFile = ‘System’ AND             TargetInstance.EventCode = ‘1007’   The WITHIN interval is only required if there isn’t a real WMI Event…

0

Finding out which machines are Laptops in a domain

Say you want to provision some settings only on all laptops in your corporate domain. The problemthough is, how do you identify which computers ones are laptops? WMI Class win32_systemEnclosure has a property – ChassisTypes. ChassisTypes is 9 in a laptop. Addtion based on reader feedback: ChassisTypes might not be 9 always, on some machines…

4

CIM 101

 The CIM is an information model, a conceptual view of the managed environment, that attempts to unify and extend the existing instrumentation and management standards (SNMP, DMI, CMIP, etc.) using object-oriented constructs and design. WMI uses the Common Information Model (CIM) industry standard to represent systems, applications, networks, devices, and other managed components. So if…

0

User Account Control and WMI

Starting with Windows Vista, under User Account Control (UAC) access-token filtering can affect which operations are allowed in WMI namespaces or what data is returned. Under UAC, all accounts in the local Administrators group run with a standard user access token, also known as UAC access-token filtering. An administrator account can run a script with an…

1

Windows Management Framework is here!

Windows Management Framework, which includes Windows PowerShell 2.0, WinRM 2.0, and BITS 4.0, was officially released to the world this morning.  By providing a consistent management interface across the various flavors of Windows, we are making our platform that much more attractive to deploy.  IT Professionals can now easily manage their Windows XP, Windows Server…


How to extend WMI Provider unload time?

1.      Extend the Provider Unload time __win32provider Instance:         UnloadTime =  <CIM_Datetime for interval http://msdn.microsoft.com/en-us/library/aa387237(VS.85).aspx>     For example: instance of __Win32Provider {                 CLSID = “{41ED66D6-53DC-4475-9765-B69FBC84CD28}”;                 HostingModel = “NetworkServiceHOST“;                 Name = “InterOpProv”;                 UnloadedTimeout = “00000001000000.000000:000”; }; ð  Making provider loaded inside an individual wmiprvse.exe, and marked the unload interval to 1…

0

Writing WMI providers FAQ series – 3 – Is it better to use embedded objects or association in a CIM model?

It happens that some CIM models need to link various entities together. The recommended approach for doing this is to use Associations and References. By default WMI is capable to handle associations based on the relations defined in the CIM schema. However, this mechanism involves an enumeration of both ends represented by the associations. Once…

0

Writing WMI providers FAQ series – 2 – When a provider doesn’t support enumeration what will be the impact for the WMI consumer?

The aim of the series is to cover a WMI Provider writing question  per post. If you have a question, you’d like the WMI team to answer, do leave a comment. Now, for the answer –   If the WMI client requests to enumerate all instances of a class supported by such a provider, a return…

3

Troubleshooting WMI providers using MSFT_Providers class

MSFT_Providers is a troubleshooting class which contains configuration information for providers.  This class can be pretty handy while troubleshooting provider issues.   For eg. Suppose you want to know which wmiprvse process is your provider loaded in, you could use HostProcessIdentifier property –   select HostProcessIdentifier from Msft_Providers where provider=”ProviderName”   or, you could use…

1