WBEM provider, 213–18
capabilities, 214
classes, 213
instance, 214
Win32_MethodParameterClass class, 213–14
Win32_WMIElementSetting class, 213–14
Win32_Account class, 202, 204, 554
Win32_ACE class, 614
Win32_ActiveRoute class, 147, 417, 422
Win32_AllocatedResource class, 54
Win32_BaseService class, 122, 191, 194, 197
Change method, 196
Create method, 194
defined, 191
Delete method, 197
See also Service classes
Win32_Battery class, 324
Win32_ClassicCOMClassSetting class, 109
Win32_CodecFile class, 146–47
defined, 146
Group property, 146
instances, 146–47
See also Multimedia audio/visual class
Win32_ComputerShutdownEvent class, 325
Win32_ComputerSystem class, 152
collection, 159
defined, 154
definition, 163
DomainRole property, 160
instances, 159
JoinDomainOrWorkGroup method, 163
property modifications, 165
Rename method, 165
UnJoinDomainOrWorkGroup method, 164
Win32_WindowsProductActivation class association, 261
Win32_CurrentProbe class, 324
Win32_CurrentTime class, 184, 320
Win32_DCOMApplicationAccessAllowedSetting class, 113
Win32_DCOMApplicationLaunchAllowedSetting class, 113
Win32_DCOMApplicationSetting class
associations, 112
defined, 109
instances, 111
settings, 109–11
See also COM component classes
Win32_Desktop class, 113–14
associations, 114
defined, 113
See also Desktop information classes
Win32_DesktopMonitor class, 97
Win32_DfsNode class, 344, 345, 348, 349, 350, 351, 352
Create method, 344, 351
instance creation, 351
instance deletion, 352
instance properties, 349
instances, 345, 348, 350
State property, 352
Timeout property, 351
Win32_DfsNodeTarget class, 348
associations, 345, 348
illustrated, 345
Win32_DfsTarget class, 344, 348, 349, 351, 352
instance properties, 349
instances, 348
property modifications, 351
State property, 352
Win32_DikPartition class
associations, 127
defined, 127
instances, 128, 129, 130
Win32_Directory class, 125
Win32_DiskDrive class, 127, 129
Win32_DiskDriveToDiskPartition class, 129
Win32_DiskQuota class, 124, 131, 330, 332
associations, 330
Association View class and, 516
instances, 331, 343
path, 343
for quota configuration, 332
for quota configuration per user, 339
references, 341
Win32_DisplayConfiguration class, 96
Win32_DisplayControllerConfiguration class, 96–97
Win32_DMAChannel class, 40
instances, 46
instances, retrieving, 47
Win32_Environment class, 115–21
command-line parameters, 115–16
defined, 115
operations, 116
See also Desktop information classes
Win32_GeneralSetting class, 759
Win32_Group class, 202, 204, 205
associations, 204, 205
defined, 202
instances, 204
See also User account classes
Win32_IP4PersistedRouteTable class, 147
associations, 416–17
associations, verifying, 423
instances, creating, 422
Win32_IP4RouteTable class, 147, 423
instances, 416, 420
instances, creating, 420
instances, deleting, 422
Win32_IP4RouteTableEvent class, 147, 416
Win32_IRQResource class, 40, 47
Win32_Keyboard class, 31
Win32_LocalTime class, 321–23
Win32_LogicalDisk class, 33–40, 127, 330, 341
Chkdsk method, 37, 39
class associations, 33, 34
defined, 33
for monitoring free space, 34–35
VolumeSerialNumber property, 366
Win32_Volume class vs., 354
WQL query conditions, 36
See also Mass storage classes
Win32_LogicalFile class, 138–39
Win32_LogicalFileSecuritySetting class, 552, 553, 554, 555
associations, 552, 553
file system object, 554
GetSecurityDescriptor method, 585–86, 716
security settings, 553
SetSecurityDescriptor method, 716, 717, 720
Win32_LogicalProgramGroup class, 201–2
Win32_LogicalProgramGroupOrItem class, 202
Win32_LogicalShareSecuritySetting class, 555, 592
Win32_LogonSession class, 149–50
associations, 150
defined, 149
Win32_MappedLogicalDisk class, 149
Win32_MethodParameterClass class, 176–77, 213–14
Win32_NamedJobObjectActgInfo class, 250
Win32_NamedJobObject class, 171, 247, 250
Win32_NamedJobObjectLimitSetting class, 250
Win32_NamedObjectProcess class, 250
Win32_NetworkAdapter class, 51, 150–51
associations, 151
Index property, 54
name property and, 51
See also Networking device classes
Win32_NetworkAdapterConfiguration class, 49
command-line parameter and method correspondence, 65
command-line parameters, 66
defined, 55
DisableIPSec method, 72, 73
EnableDHCP method, 69
EnableIPSecFilter method, 70, 72, 73
EnableIPSec method, 72
EnableStatic method, 71
EnableWINS method, 70
Index property, 55
instance, retrieving, 55, 66
methods, 58–60
network adapter configuration, 62–65, 66–68
parameters input, 62
parameters required by, 60
ReleaseDHCPLeaseAll method, 69
ReleaseDHCPLease method, 69
ReNewDHCPLeaseAll method, 70
ReNewDHCPLease method, 70
SetDeadGWDetect method, 70, 72
SetDNSSuffixSearchOrder method, 70
SetGateways method, 71–72
SetIPConnectionMetric method, 71
string to array conversion, 62
See also Networking device classes
Win32_NetworkClient class, 148
Win32_NetworkConnection class, 148
Win32_NetworkProtocol class, 55, 57, 150
Win32_NTDomain class, 152–53
Win32_NTEventlogFile class, 220–24
capabilities, 221
defined, 220
sample use, 221–24
Win32_NTLogEvent class, 219–20
associations, 219
output, 220
Win32_OperatingSystem class
collection, 159
defined, 154
instances, 159
Win32_OSRecoveryConfiguration class
collection, 159
defined, 154
instances, 159
Win32_PageFile class
defined, 139
instances, 143, 144
Name property, 143
See also Page file classes
Win32_PageFileUsage class, 143
Win32_PCMCIAController class, 40
Win32_PerfFormattedData classes, 489–92
as calculated performance counter, 493
list of, 489–91
naming conventions, 492
Win32_PerfFormattedData_Tcpip_NetworkInterface class, 493–94, 497
instance name, 497
instances, 497
properties, 494
Win32_PerfRawData classes, 486, 487–88, 489
list of, 487–88
naming convention, 492
Win32_PhysicalMemory class, 40
Win32_PingStatus class, 147
with asynchronous timer, 408–10
availability, 408
instances, creating, 405
instantiation, 408
NetDiagnostics class and, 414
properties, displaying, 407
Win32_PointingDevice class, 31–32
output, 31–32
practical application, 32
See also Input device classes
Win32_PortableBattery class, 324
Win32_POTSModem class, 77, 78
associations, 77
properties enumeration, 78
See also Modem device classes
Win32_PowerManagementEvent class, 323–24, 325
availability, 323–24
relationship, 74
Win32_Printer class, 82–83
AddPrinterConnection method, 83
AddPrinterDriver method, 83, 94
associations, 82–83
CancelAllJobs method, 83
defined, 89
DMTF date/time value, 90
instance creation, 83, 91
instance deletion, 83
Pause method, 83
Resume method, 83
StartTime property, 90
UntilTime property, 90
Win32_PrinterDriver class, 89
Win32_PrinterJob class, 83, 89
Win32_Process class
asynchronous method execution, 179
Create method, 176, 177, 181
defined, 171
executable name and, 174
GetOwner method, 175
GetOwnerSID method, 175
instances, 176
Terminate method, 178, 180, 181
See also Process classes
Win32_Processor class, 40
Win32_ProcessStartup class, 176–78
as abstract class, 176
instances, 176, 178
properties, 177
See also Process classes
Win32_Product class, 269, 272, 275, 277, 278, 281
Admin method, 278
Advertise method, 278
associations, 275
Install method, 278
instances, 275, 281
key, 281
methods, 227
Win32 providers, 29–209
capabilities, 30
classes, 30
class support, 29
computer system hardware classes, 31–105
defined, 29
implementation, 29–30
method, registration, 5
operating system classes, 105–209
summary, 209
_Win32Provider system class
ComponentID property, 108
instances, 8
Win32_Proxy class, 258, 260
Win32_QuickFixEngineering class, 154
Win32_QuotaSetting class, 124, 131, 330, 331, 332, 338
associations, 330
instances, 331
instances, updating, 338
using, 332
Win32_Registry class, 183
setting read/write property (directly), 868–69
setting read/write property (indirectly), 869
Win32_ScheduledJob class, 188, 190
Create method exposed by, 190
DaysOfMonth parameter, 185, 187, 188
DaysOfWeek parameter, 185, 187, 188
defined, 184
instances, 188
methods, 184
properties, 188
See also Job scheduler classes
Win32_SecurityDescriptor class, 544
Group property, 619–20
instances, 604, 611
Owner property, 619
Win32_SecuritySettingOfLogicalFile class, 552
Win32_ServerConnection class, 201, 242, 243, 246
Win32_ServerSession class, 201, 242, 243, 246
Win32_Service class, 30, 191–97
defined, 191
instances, 194
retrieving all instances of, 867–68
See also Service classes
Win32_SessionConnection class, 242
Win32_SessionShare class, 242
Win32_ShadowCopy class, 354, 360, 361
Create method, 359
defined, 354
instances, 354, 358
instances, retrieving, 363
instances, viewing, 358
viewing, 358
Win32_ShadowStorage class, 354, 361, 363, 370, 371–72
associations, 363
Create method, 360–61
defined, 354
instances, creating, 370
instances, removing, 371–72
instances, retrieving, 370
instances, updating, 371
MaxSpace property, 370
properties, 354–55
Win32_Share class, 198, 202
Create method, 198
defined, 198
Delete method, 198
SetShareInfo method, 198, 201, 720
See also Share classes
Win32_ShortcutFile class, 124
Win32_SID class, 113
Win32_SoftwareFeature class, 275
Win32_SystemAccount class, 202
Win32_SystemConfigurationChangeEvent class, 326–27
Win32_SystemDriver class, 122–23
defined, 122
output, 122–23
properties and methods, 122
See also Driver classes
Win32_Terminal class, 755
Win32_TerminalServiceToSetting class, 751, 752
ChangeMode method, 752
instances, customizing, 754
SetAllowTSConnections method, 753
SetHomeDirectory method, 753
SetPolicyPropertyName method, 754
SetProfilePath method, 753
SetSingleSession method, 753
SetTimeZoneRedirection method, 753
Win32_TimeZone class, 115
Win32_Trustee class, 544
instance binary representation requirement, 694
instances, creating, 692–93
instance SID requirement, 693
Win32_TSAccount class, 771
Win32_TSClientSetting class, 760–63
ConnectionPolicy property, 762
ConnectionSettings method, 762
SetClientProperty method, 763
SetColorDepth method, 762
SetColorDepthPolicy method, 762
Win32_TSEnvironmentSetting class, 764–66
Win32_TSLogonSetting class, 766–67
Win32_TSNetworkAdapterSetting class, 757–59
MaximumConnections property, 757
SelectAllNetworkAdapters method, 759
SelectNetworkAdapterIP method, 759
Win32_TSPermissionSetting class, 770
Win32_TSRemoteControlSetting class, 756
Win32_TSSessionSetting class, 768–70
ActiveSessionLimit property, 769
BrokenConnectionAction property, 770
BrokenConnectionPolicy property, 770
defined, 768
DisconnectedSessionLimit property, 769
IdleSessionLimit property, 769
TimeLimit method, 768
TimeLimitPolicy property, 768
Win32_UninterruptiblePowerSupply class, 324
Win32_UserAccount class, 114, 115, 202, 207, 208
defined, 202
instances, 208
in user name conversion, 207
See also User account classes
Win32_UserDesktop class, 144
Win32_UTCTime class, 320–21, 323
Win32_VideoConfiguration class, 96
Win32_VideoController class
defined, 99
properties list, 103
Win32_VideoSettings class, 99
Win32_VolumeChangeEvent class, 328, 329
defined, 328
EventType property, 329
use, 328
Win32_Volume class, 353, 354, 355
associating shadow storage with, 361
associations, 355
Chkdsk method, 365–66
DefragAnalysis method, 367–68
Format method, 369–70
illustrated, 355
instances, 360, 361, 363, 365
SerialNumber property, 367
Win32_LogicalDisk class vs., 354
Win32_VolumeQuotaSetting class, 124, 131, 331
Win32_VXD class, 123–24
Win32_WindowsProductActivation class, 261, 265–66
methods, 266
operations supported by, 265
SetProductKey method, 266–67
Win32_ComputerSystem class association, 261
Win32_WMIElementSetting class, 213–14
Win32_WMISetting class
properties exposure, 215
as singleton class, 217
Windows Authorization Access Group (WAAG), 732, 738
defined, 738
group, 738
Windows Driver Model (WDM) provider, 771–75
capabilities, 771
classes, 773–74
defined, 771
MSDiskDriver_Geometry class, 772, 775
MSNdis_MediaConnectStatus class, 775
MSNdis_StatusMediaDisconnect class, 775
Windows Installer
actions, 280–81
Admin Installation, 277, 278
Advertisement, 277
Installation, 277, 278
Microsoft Support Tools, 276
package management, 273–75, 277–80
power, 277
Windows Installer provider
actions classes, 268
adding, under Windows Server 2003, 268
associations classes, 269
checks classes, 269
classes, 268–69, 270–72
core classes, 269
defined, 267
external association classes, 269
installing, 267
settings classes, 269
Win32_Product class, 269, 272, 275, 277, 278, 281
Windows Integrated Authentication (WIA), 537
Windows management layer, 863
Windows Product Activation provider, 211, 260–67
capabilities, 260
classes, 261
defined, 260
methods, 261
Win32_WindowsProductActivation class, 261, 265–66
Windows Product Activation (WPA)
action verification, 266
code, 263–65
execution, 262
information display, 265
information management, 260
See also Windows Product Activation provider
Windows Proxy provider, 258–60
capabilities, 258
defined, 258
Win32_Proxy class, 258, 260
Windows scripting environments, 864–65
Windows Server 2003
Active Directory Extended Rights and, 658–65
lockdown mechanism, 735–37
registry activating lockdown mechanism, 735
SNMP providers and, 451
Terminal Services, 749–71
Windows services
alerting, 885–88
connecting, 851–52, 853–54
creating, 193
deleting, 193
displaying, with WQL event query, 854–56
instances, creating, 195–96
instances, deleting, 197
instances, modifying, 196
instances, viewing, 194
managing, 885–88
monitoring, 885–88
parameters, 195
retrieving, 851–52, 853–54
updating, 193
WinMgmt.Exe, 253, 732, 734
callbacks, 734
stopping/restarting, 253
WITHIN statement, 27, 30, 281, 425, 751
WMI
access methods, 529–30
Active Directory objects connection with, 571–73
Active Directory objects retrieval with, 594–96
Active Directory object update with, 721–23
adding ACEs in, 701–3
ASP and, 536–44
CIM repository namespace connection with, 583–85
CIM repository namespace retrieval with, 602–3
COM API, 785, 813, 851
deciphering ACLs and, 625
Exchange 2000 mailbox connection with, 576–77
Exchange 2000 mailbox retrieval with, 597–98
Exchange 2000 mailbox update, 726–27
file/folder connection with, 562–65
file/folder retrieval with, 585–87
file/folder update with, 715–18
file system share connection with, 567–69
file system share retrieval with, 592–93
file system share update with, 719–20
information types, 813
.NET Framework and, 843–58
privileges, 531–34
registry keys connection with, 581
registry keys retrieval with, 600
removing ACEs in, 707–10
reordering ACEs in, 713–15
SDK, 8
security configuration, 529–35
security descriptor management, 544–51
security descriptor representation, deciphering, 611–15
security scripting, 529–739
settings, updating, 215–17
WMI-ASP scripts, 539
CIM repository accessed by, 541
Win32_Service class, 541, 542–44
WMIBinaryMofResource class, 772
WMI CIM Studio, 20, 30, 482
WMI client applications
asynchronous operation, 733
asynchronous operation with UnSecApp.Exe, 733, 736
WMIEventHandler object, 857
WMIEventWatcher object, 857
WMI filters, 284
defined, 283
illustrated example, 283
WMI logging level, 218
WMIManageSD.Wsf script, 556, 558, 561, 590, 600, 606, 666, 686, 739
WMI provider discovery, 8–20
helpers for, 20–26
summary, 27–28
system classes, 1
WMI providers, 211–527
Active Directory, 37–394
Active Directory Replication, 394–405
application, 741–860
capabilities, 8, 16–19
categories, 212
class, 2–3
Clock, 319–23
Cluster, 747–49
Configuration Change, 326–28
core OS components, 212, 213–319
core OS components event, 212, 319–29
core OS file system components, 212, 329–72
DFS, 344–52
Disk Quota, 124, 131, 329–44
DNS, 211, 423–50
event consumer, 4–6
Event Correlator, 525–26
Exchange 2000, 785–802
Forwarding, 517–25
helper, 213, 508–26
high-performance, 6, 486–502
IIS, 776–85
instance, 3
Internet Explorer, 811–13
IP routing, 415–23
Kernel Job Object, 246–51
list, 16–19
listing, 8–9
method, 4
Microsoft Office, 809–11
most important, 16–19
network components, 212, 405–86
Network Diagnostic, 412–15
Network Load-Balancing, 741–47
NT Event Log, 218–24
OVOW, 825–43
performance, 212, 486–507
Performance Monitoring, 502–7
Ping, 405–12
power management, 323–25
primary role, 6
property, 3–4
registration system classes, 2
Registry, 224–41
retrieving information about, 1
RSOP, 281–309
Security, 551–55
Session, 241–46
Shadow Copy providers, 352–72
shutdown, 325–26
SNMP, 450–86
SNMP class registration, 2
SQL Server 2000, 802–9
summary, 526
System Restore, 309–19
Terminal Server, 749–71
trace logging of, 391
TrustMon, 251–58
types of, 1–8
View, 508–17
Volume Change, 328–29
WBEM, 213–18
WDM, 771–75
Windows Installer provider, 267–81
Windows Proxy, 258–60
WPA, 260–67
WMISystemRestore.Wsf script, 312, 317
Workgroups, joining/unjoining, 163
Workstations, renaming, 163
WQLEventQuery object, 856, 857
WSHRemote, 111