Windows Management Instrumentation

learn more… | top users | synonyms

30
votes
6answers
5k views

Should I install Windows Management Framework 3.0?

I'm posting this as a BIG CAVEAT to everyone. I know it's not a standard Q&A, but I think this is something every Windows admin should know. There is a very real risk of falling into Big Troubles. ...
23
votes
4answers
42k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
16
votes
7answers
3k views

Identify Windows 2012 Server core

I want to detect if a 2012 server is has been setup as a Core install using WMI. An earlier question, would seem to indicate that I can get the OperatingSystemSKU from Win32_OperatingSystem. My ...
14
votes
2answers
29k views

What is stored in %Windir%\System32\LogFiles\WMI\RtBackup?

I occasionally notice in Resource Monitor hard disk activity related to ETL files in the folder C:\Windows\System32\LogFiles\WMI\RtBackup. Which process/service creates these ETL files and what is ...
14
votes
1answer
9k views

SCCM 2012 SP1 - DownloadContentFiles() failed with hr=0x80041013

We noticed our Automatic Deployment Rules for Software Updates failed to automatically download and apply this month's patches from Microsoft although they are correctly listed in the Catalog. ...
12
votes
1answer
2k views

Is anyone using an SNMP and/or WMI poller to push custom metrics to Amazon CloudWatch, and if so how?

Amazon CloudWatch has a decent console, and an alarm system which uses Amazon SNS for notifications. Originally it only gave you AWS metrics, e.g. EC2 instance CPU utilization. Recently they added ...
11
votes
3answers
1k views

Installing Windows Management Framework 3.0 basically destroyed WMI, how can I fix it without reinstalling the O.S.?

Related, of course, to this question. Before discovering it was somewhat... dangerous, I installed Windows Management Framework 3.0 on a number of Windows Server 2008 R2 SP1 servers, and WMI got ...
11
votes
1answer
4k views

Common WQL Monitoring Queries

What WQL queries would you use for monitoring typical Windows bottlenecks? Which would you use to obtain data similar to 'top' or 'netstat'? What interval would you poll at? Here are a few that I ...
11
votes
2answers
6k views

WmiPrvSE memory leak on Windows 2008 *R2*

I've seen references on Windows 2008 to WmiPrvSE leaks, but nothing about Windows 2008 R2. We're running R2 on top of Hyper-V (2008). We are also running NSClient++ for monitoring from opsview. Over ...
11
votes
3answers
3k views

Windows 10 WMI and Event Viewer access denied

We have a Windows domain where I used GPOs to enable remote management and monitoring of all of our workstations using WMI. I can also connect to all of our computers with Computer Management and ...
9
votes
7answers
29k views

What is the best (free) tool to wrap an .exe into a MSI?

I'm looking at deploying some software via GPSI and the current version of the software is distributed as a .exe so I need to convert it to an MSI file. furthermore, why does MS still distribute some ...
9
votes
3answers
5k views

SCCM Global Condition WQL Query Type Mismatch (wbemErrTypeMismatch - 0x80041005)

We have been handling all of our targeting logic for Packages (and now Applications) with Collections. Now that we have moved from SCCM 2007 to SCCM 2012 SP1 it was recommended that we move that logic ...
8
votes
1answer
1k views

DFSR-related WMI info is missing

OS: Server 2012 Core and Server 2012 R2 Core. DFS-Replication is installed and appears healthy. I am using WMI to collect information from DFSR replication members. The queries work on many of the ...
8
votes
1answer
838 views

How to accept EULAs for Software updates deployed through SCCM using Powershell

I'm trying to use the Start-CMSoftwareUpdateDeployment cmdlet to deploy a software update group to an existing collection. PS WHO:\> Start-CMSoftwareUpdateDeployment -SoftwareUpdateGroupName "...
8
votes
4answers
16k views

Network Logon Issues with Group Policy and Network

I am gravely in need of your help and assistance. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ ...
7
votes
3answers
7k views

What is the closest equivalent of “load average” in Windows available via WMI?

Linux has a notion of Load Average which is defined as: System load averages is the average number of processes that are either in a runnable or uninterruptable state. A process in a runnable ...
7
votes
1answer
199 views

GPO software deployment without WMI?

I put together a GPO to deploy a MSI file to a security group comprised of computer objects. After rebooting a test workstation so that it picks up its group membership and running gpupdate, I then ...
7
votes
4answers
11k views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
7
votes
2answers
2k views

powershell: How to check if S.M.A.R.T is enabled on remote machines

I was attempting to get disk info of remote machines, including whether or not SMART is enabled on the drive by using the win32_diskdrive class. This is trickier than I thought. While it's easy ...
7
votes
1answer
2k views

What wmi counters can indicate port exhaustion

I'm currently investigating an issue in which we suspect port exhaustion from too many outgoing connections is a factor. I'd like be able to identify when the server is at or near to port exhaustion, ...
6
votes
2answers
33k views

Why is my System event log full of WMI Performance Adapter messages?

The System event log continually shows these messages: The WMI Performance Adapter service entered the running state. and then The WMI Performance Adapter service entered the stopped ...
6
votes
2answers
378 views

identify / fingerprint a Windows Server core installation versus full

Seems like this should be easy, but I am not finding any information on how to remotely identify a Windows Server "core" installation as such, via WMI, Powershell or other method that can query lots ...
6
votes
1answer
42 views

WMI permissions for changing local IP without elevated privileges

I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
6
votes
1answer
2k views

Have issue with monitoring 32bit app pools running on 64bit IIS

I am performing a monitoring task on my 64bit web server which has couple of applications pools running in 32bit mode. I am using .Net CLR Memory object in perfmon to monitor them. However, my ...
5
votes
5answers
2k views

Powershell recursive WMI query

I'd like to start at the top of a WMI namespace, recurse through all the objects, then recurse through each object's property list, filtering out and returning to console only those properties that ...
5
votes
1answer
25k views

How to monitor DFSR backlog more efficiently than dfsrdiag

Is there a way to monitor the DFSR backlog in a manner more efficient than using dfsrdiag.exe backlog? I wrote a program that just slurps in the backlog count via dfsrdiag.exe backlog /smem:alpha /...
5
votes
6answers
5k views

Useful WMI admin scripts

In a comment to my response to this question , cop1152 said he loved WMI scripts. Well, so do I! What are your favourite, best, most useful scripts you'd like to share with the community? thanks.
5
votes
3answers
550 views

checking for missing values in WQL or (WQL/WMI filter to return `true` for desktops/servers, but `false` on laptops)

I have a challenge where I want to use a GPO to set a Power Plan. Working on constructing a WMI Filter (using WQL), I ran into a problem of determining a set of WQL statements that would always ...
5
votes
3answers
1k views

How to detect current media type in CLI under Windows? (DVD-RW, BD-R, etc)

How to detect current media type in CLI under Windows? (DVD-RW, BD-R, etc) I've tried with wmic cdrom get /format:list but no info about the current media type. I want to detect if the disc is a CD, ...
5
votes
4answers
3k views

Does WMI cause CPU Creep?

I have a few servers, running Server 2003 Std/Ent and SQL 2000/2005, that I've noticed will start showing higher CPU usages over time. Stopping the WMI service and restarting it will always bring it ...
5
votes
1answer
11k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
5
votes
3answers
2k views

How to retrieve Serial Number from Windows on new U/EFI box?

I need to retrieve the hardware serial numbers from a set of new HP mini desktops that need provisioning. This worked in the past using a WSH script to query it via WMI. Unfortunately, the newer ...
5
votes
1answer
9k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
5
votes
1answer
57 views

Bug in WMI namespace for MicrosoftDNS Statistics class?

I'm trying to query DNS statistics from Windows Server 2012 via WMI. If I run the following command in Powershell: Get-WmiObject -Namespace root\MicrosoftDNS -Class MicrosoftDNS_Statistic | ?{ $_....
5
votes
1answer
9k views

WMI filter for Internet Explorer 10+

I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64). I ...
5
votes
1answer
7k views

WMI Rights required to read root\MicrosoftIISv2 in IIS7 with IIS6 compatibility mode

I need to manage my IIS7 (Windows Server 2008) remotely with a WMI IIS6 API. So I added the IIS6 WMI Compatibility and IIS6 Metabase Compatibility roles to access the root\MicrosoftIIsv2 namespace. I ...
5
votes
2answers
474 views

Correlating volumes and physical disks through WMI

I'm trying to correlate volumes (as enumerated from win32_volume for those where DriveType = 3) back to win32_physicaldisk instances. Everything that I've seen in my research points to the answer ...
4
votes
2answers
17k views

How to check if WMI is broken or not?

I'm looking for a way to check whether WMI is running properly on a Windows Server 2008 machine. I'd prefer to do this by running a command. Is there any?
4
votes
6answers
26k views

How to get the IP Address for your Local Area Connection on Windows Server?

I want to create a batch or vbs file that will put together a url and executed. Part of that url needs to be the actual ip address of the machine. How I am able to get that IP address in a variable ...
4
votes
2answers
384 views

Using SCCM and WMI to retrieve Font information

I need to be able to inventory the information about the fonts currently installed in our machines (around 200,000). It seems some users installed fonts they were not supposed to (due to licensing ...
4
votes
1answer
153 views

Prevalence of WMI enabled in real Windows Server networks

Hi I would like to get opinions from systems administrators, on how common it is that WMI functionality is actually enabled in corporate networks. I am writing an enterprise network application that ...
4
votes
1answer
1k views

Can I apply a Group Policy only to systems that have specific software installed?

If I wanted to setup a group policy that installed Java, this would be no problem. But is it possible for the group policy to only apply to systems that have Mozilla Firefox installed? I don't know ...
4
votes
1answer
128 views

Is it easy or even possible yet to manage windows firewall with powershell?

I'm doing some POC testing on a server 2012 environment, and during initial firewall configuration I find myself going to the GUI repeatedly when I'd really much rather be able to write a script. I've ...
4
votes
1answer
293 views

Are there any known incompatibilities with WMF 4.0?

We don't typically run bleeding edge software in $environment, that being said since 4.0 has been out for a while; I haven't come across any conflicts posted on the web. Does anyone know of any? ...
4
votes
1answer
2k views

Difference between CurrentClockSpeed and MaxClockSpeed

Rationale this belongs on ServerFault rather than StackOverflow - I already have my program which gets the value, I am querying the value returned and what it means. I have an in-house program which ...
4
votes
1answer
854 views

Win32_OperatingSystem.FreePhysicalMemory and $_.TotalVisibleMemory giving output in wrong units

I've been putting together a pretty simple script to monitor some aspects of our Terminal Server farm usage and am implementing a section where I check the memory usage on the servers at a given point ...
4
votes
2answers
3k views

How do I identify a volume in WMI from a volume name reported in the event log?

I have a Windows 2008R2 server that's reporting the following error: The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\...
4
votes
2answers
904 views

What is the WMI class to manage BitLockerToGo

I am working on a script that will be used to audit some machines. I can check whether or not volumes are encrypted using the Win32_EncryptableVolume class in root\cimv2\Security\EncryptableVolume. ...
4
votes
1answer
3k views

How to get physical partition name from iSCSI details on Windows?

I've got a piece of software that needs the name of a partition in \Device\Harddisk2\Partition1 style, as shown e.g. in WinObj. I want to get this partition name from details of the iSCSI connection ...
4
votes
1answer
743 views

WMI Impersonation levels within vbscript / ASP code

I have an IIS 7.5 web site running "classic" ASP code (not ASP.NET) where the site is running under the normal service context, and only "Windows Authentication" is enabled. Users and navigate the ...