Windows Management Instrumentation

learn more… | top users | synonyms

30
votes
5answers
2k views

Should I install Windows Management Framework 3.0?

I'm posting this as a BIG CAVEAT to everyone. I know it's not a standard Q&A, but I think this is something every Windows admin should know. There is a very real risk of falling into Big ...
14
votes
4answers
15k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
13
votes
1answer
4k views

SCCM 2012 SP1 - DownloadContentFiles() failed with hr=0x80041013

We noticed our Automatic Deployment Rules for Software Updates failed to automatically download and apply this month's patches from Microsoft although they are correctly listed in the Catalog. ...
12
votes
5answers
891 views

Identify Windows 2012 Server core

I want to detect if a 2012 server is has been setup as a Core install using WMI. An earlier question, would seem to indicate that I can get the OperatingSystemSKU from Win32_OperatingSystem. My ...
12
votes
1answer
970 views

Is anyone using an SNMP and/or WMI poller to push custom metrics to Amazon CloudWatch, and if so how?

Amazon CloudWatch has a decent console, and an alarm system which uses Amazon SNS for notifications. Originally it only gave you AWS metrics, e.g. EC2 instance CPU utilization. Recently they added ...
11
votes
3answers
904 views

Installing Windows Management Framework 3.0 basically destroyed WMI, how can I fix it without reinstalling the O.S.?

Related, of course, to this question. Before discovering it was somewhat... dangerous, I installed Windows Management Framework 3.0 on a number of Windows Server 2008 R2 SP1 servers, and WMI got ...
11
votes
2answers
18k views

What is stored in %Windir%\System32\LogFiles\WMI\RtBackup?

I occasionally notice in Resource Monitor hard disk activity related to ETL files in the folder C:\Windows\System32\LogFiles\WMI\RtBackup. Which process/service creates these ETL files and what is ...
10
votes
2answers
5k views

WmiPrvSE memory leak on Windows 2008 *R2*

I've seen references on Windows 2008 to WmiPrvSE leaks, but nothing about Windows 2008 R2. We're running R2 on top of Hyper-V (2008). We are also running NSClient++ for monitoring from opsview. Over ...
9
votes
2answers
2k views

SCCM Global Condition WQL Query Type Mismatch (wbemErrTypeMismatch - 0x80041005)

We have been handling all of our targeting logic for Packages (and now Applications) with Collections. Now that we have moved from SCCM 2007 to SCCM 2012 SP1 it was recommended that we move that logic ...
8
votes
1answer
3k views

Common WQL Monitoring Queries

What WQL queries would you use for monitoring typical Windows bottlenecks? Which would you use to obtain data similar to 'top' or 'netstat'? What interval would you poll at? Here are a few that I ...
8
votes
1answer
369 views

How to accept EULAs for Software updates deployed through SCCM using Powershell

I'm trying to use the Start-CMSoftwareUpdateDeployment cmdlet to deploy a software update group to an existing collection. PS WHO:\> Start-CMSoftwareUpdateDeployment -SoftwareUpdateGroupName ...
7
votes
7answers
11k views

What is the best (free) tool to wrap an .exe into a MSI?

I'm looking at deploying some software via GPSI and the current version of the software is distributed as a .exe so I need to convert it to an MSI file. furthermore, why does MS still distribute some ...
7
votes
1answer
148 views

GPO software deployment without WMI?

I put together a GPO to deploy a MSI file to a security group comprised of computer objects. After rebooting a test workstation so that it picks up its group membership and running gpupdate, I then ...
7
votes
4answers
6k views

Network Logon Issues with Group Policy and Network

I am gravely in need of your help and assistance. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ ...
6
votes
3answers
4k views

What is the closest equivalent of “load average” in Windows available via WMI?

Linux has a notion of Load Average which is defined as: System load averages is the average number of processes that are either in a runnable or uninterruptable state. A process in a runnable ...
6
votes
4answers
2k views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
6
votes
2answers
952 views

powershell: How to check if S.M.A.R.T is enabled on remote machines

I was attempting to get disk info of remote machines, including whether or not SMART is enabled on the drive by using the win32_diskdrive class. This is trickier than I thought. While it's easy ...
5
votes
1answer
279 views

identify / fingerprint a Windows Server core installation versus full

Seems like this should be easy, but I am not finding any information on how to remotely identify a Windows Server "core" installation as such, via WMI, Powershell or other method that can query lots ...
5
votes
6answers
5k views

Useful WMI admin scripts

In a comment to my response to this question , cop1152 said he loved WMI scripts. Well, so do I! What are your favourite, best, most useful scripts you'd like to share with the community? thanks.
5
votes
3answers
238 views

checking for missing values in WQL or (WQL/WMI filter to return `true` for desktops/servers, but `false` on laptops)

I have a challenge where I want to use a GPO to set a Power Plan. Working on constructing a WMI Filter (using WQL), I ran into a problem of determining a set of WQL statements that would always ...
5
votes
3answers
1k views

How to retrieve Serial Number from Windows on new U/EFI box?

I need to retrieve the hardware serial numbers from a set of new HP mini desktops that need provisioning. This worked in the past using a WSH script to query it via WMI. Unfortunately, the newer ...
5
votes
1answer
4k views

WMI filter for Internet Explorer 10+

I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64). I ...
5
votes
1answer
4k views

WMI Rights required to read root\MicrosoftIISv2 in IIS7 with IIS6 compatibility mode

I need to manage my IIS7 (Windows Server 2008) remotely with a WMI IIS6 API. So I added the IIS6 WMI Compatibility and IIS6 Metabase Compatibility roles to access the root\MicrosoftIIsv2 namespace. I ...
5
votes
0answers
27 views

Correlating volumes and physical disks through WMI

I'm trying to correlate volumes (as enumerated from win32_volume for those where DriveType = 3) back to win32_physicaldisk instances. Everything that I've seen in my research points to the answer ...
4
votes
2answers
10k views

How to check if WMI is broken or not?

I'm looking for a way to check whether WMI is running properly on a Windows Server 2008 machine. I'd prefer to do this by running a command. Is there any?
4
votes
6answers
15k views

How to get the IP Address for your Local Area Connection on Windows Server?

I want to create a batch or vbs file that will put together a url and executed. Part of that url needs to be the actual ip address of the machine. How I am able to get that IP address in a variable ...
4
votes
5answers
1k views

Powershell recursive WMI query

I'd like to start at the top of a WMI namespace, recurse through all the objects, then recurse through each object's property list, filtering out and returning to console only those properties that ...
4
votes
1answer
124 views

Prevalence of WMI enabled in real Windows Server networks

Hi I would like to get opinions from systems administrators, on how common it is that WMI functionality is actually enabled in corporate networks. I am writing an enterprise network application that ...
4
votes
1answer
11k views

How to monitor DFSR backlog more efficiently than dfsrdiag

Is there a way to monitor the DFSR backlog in a manner more efficient than using dfsrdiag.exe backlog? I wrote a program that just slurps in the backlog count via dfsrdiag.exe backlog /smem:alpha ...
4
votes
1answer
106 views

Is it easy or even possible yet to manage windows firewall with powershell?

I'm doing some POC testing on a server 2012 environment, and during initial firewall configuration I find myself going to the GUI repeatedly when I'd really much rather be able to write a script. I've ...
4
votes
1answer
110 views

Are there any known incompatibilities with WMF 4.0?

We don't typically run bleeding edge software in $environment, that being said since 4.0 has been out for a while; I haven't come across any conflicts posted on the web. Does anyone know of any? ...
4
votes
4answers
2k views

Does WMI cause CPU Creep?

I have a few servers, running Server 2003 Std/Ent and SQL 2000/2005, that I've noticed will start showing higher CPU usages over time. Stopping the WMI service and restarting it will always bring it ...
4
votes
1answer
5k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
4
votes
2answers
720 views

What is the WMI class to manage BitLockerToGo

I am working on a script that will be used to audit some machines. I can check whether or not volumes are encrypted using the Win32_EncryptableVolume class in root\cimv2\Security\EncryptableVolume. ...
4
votes
2answers
665 views

How do I identify a volume in WMI from a volume name reported in the event log?

I have a Windows 2008R2 server that's reporting the following error: The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume ...
4
votes
1answer
2k views

How to get physical partition name from iSCSI details on Windows?

I've got a piece of software that needs the name of a partition in \Device\Harddisk2\Partition1 style, as shown e.g. in WinObj. I want to get this partition name from details of the iSCSI connection ...
4
votes
1answer
472 views

WMI Impersonation levels within vbscript / ASP code

I have an IIS 7.5 web site running "classic" ASP code (not ASP.NET) where the site is running under the normal service context, and only "Windows Authentication" is enabled. Users and navigate the ...
4
votes
4answers
4k views

How can I get WMI to return info on physical disks in Dell Poweredge server with RAID enabled?

I'm using WMI to gather stats on some of our servers, and I'm trying to get details of the physical disks that are installed in each server. The servers are various Dell PowerEdge models. Windows' ...
4
votes
1answer
1k views

Use WMI to detect a USB drive was connected, regardless of whether it was mounted?

I am writing a script that uses MS KB 823732 to temporarily prevent users from plugging in new USB storage devices. This works fine, and the HKLM\...\Services\UsbStor registry key successfully blocks ...
4
votes
1answer
747 views

What are the minimum permissions to read the WMI class 'MSSerial_PortName'?

I am configuring a local application user (part of BUILTIN\Users) on a Windows 7 kiosk. The kiosk has a special USB device running on a virtual COM port. The user needs permission to read the WMI ...
4
votes
2answers
15k views

Why is my System event log full of WMI Performance Adapter messages?

The System event log continually shows these messages: The WMI Performance Adapter service entered the running state. and then The WMI Performance Adapter service entered the stopped ...
3
votes
2answers
12k views

How to uninstall software using batch file

I want to uninstall a software by calling a bat file. It must be automatically, without entering any parameters during the uninstallation. How to make the bat file which would be able to uninstall ...
3
votes
2answers
1k views

Delete Shadow Copies Remotely

I currently use DISKSHADOW to remove shadow copies from our Hyper-V servers. To do this I have to log onto the server but psexec doesn't work. psexec \\hyper-v-server diskshadow DISKSHADOW> Error ...
3
votes
1answer
132 views

Windows 7 WMI ODBC driver installation?

I am interested leveraging the ease of report production provided by Microsoft SQL Report Builder, but I would like WMI as an available datasource. Since SQL Report Builder relies only on SQL, I ...
3
votes
1answer
1k views

Difference between CurrentClockSpeed and MaxClockSpeed

Rationale this belongs on ServerFault rather than StackOverflow - I already have my program which gets the value, I am querying the value returned and what it means. I have an in-house program which ...
3
votes
2answers
341 views

Can I still use WMI to manage SQL Server 2005 and 2008?

I've seen some articles on how to use WMI to manage SQL2000 servers (after installing SQLWMI80.msi manually) but I've not seen anything about this for SQL2005 and SQL2008. Has this been depreciated? ...
3
votes
1answer
207 views

How is the computer chassis type assigned

So you can use Get-WmiObject win32_systemenclosure | select chassistypes To get the Windows chassis type for a machine as defined in this list: ...
3
votes
1answer
359 views

I am getting Invalid class errors for my PowerShell script

When I run this script, I get this error Get-WmiObject : Invalid class “Msvm_ImageManagementService” and Get-WmiObject : Invalid class "MSPower_DeviceEnable" and Get-WmiObject : Invalid class ...
3
votes
2answers
719 views

Can you use WMI to determine if a connection gets its DNS servers from DHCP?

The DNS server search order for a network interface can be read from Win32_NetworkAdapterConfiguration like this in Powershell, or programmatically using .Net ManagementObjects: > $NICs = ...
3
votes
2answers
410 views

Stopping a scheduled task with WMIC

I need to find some method for disabling a scheduled task on a remote machine and waiting until that task has stopped executing if it happens to be running at the moment. I'd like to do this through ...