MIB Viewer

INFORMANT-OS

1068 objects
The MIB module for informant operating system WMI entities.
Imported Objects
SNMPv2-SMICounter64 Gauge32 Integer32 MODULE-IDENTITY OBJECT-IDENTITY OBJECT-TYPE
SNMPv2-TCDateAndTime TruthValue
WTCSinformant WtcsDisplayString
OIDNameAccessStatusDescription
1.3.6.1.4.1.9600.1.22IdentitywmiOperatingSystemThe MIB module for informant operating system WMI entities.
1.3.6.1.4.1.9600.1.22.1IdentitywmiDesktopcurrentThe Desktop subcategory groups classes that represent objects that define a specific desktop configuration.
1.3.6.1.4.1.9600.1.22.1.1Tablewin32DesktopTablenot-accessiblecurrentThe Win32_Desktop WMI class represents the common characteristics of a user's desktop. The properties of this class can be modified by the user to customize th…
1.3.6.1.4.1.9600.1.22.1.1.1Rowwin32DesktopEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.1.1.1.1ColumnosdtIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.1.1.1.2ColumnosdtBorderWidthread-onlycurrentWidth of the borders around all windows with adjustable borders. Example: 3
1.3.6.1.4.1.9600.1.22.1.1.1.3ColumnosdtCaptionread-onlycurrentShort description (one-line string) of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.1.1.1.4ColumnosdtCoolSwitchread-onlycurrentFast task switching is turned on. Fast task switching allows the user to switch between windows using the ALT+TAB keyboard combination.
1.3.6.1.4.1.9600.1.22.1.1.1.5ColumnosdtCursorBlinkRateread-onlycurrentLength of time between successive cursor blinks. Example: 530
1.3.6.1.4.1.9600.1.22.1.1.1.6ColumnosdtDescriptionread-onlycurrentDescription of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.1.1.1.7ColumnosdtDragFullWindowsread-onlycurrentContents of a window are shown when a user moves the window.
1.3.6.1.4.1.9600.1.22.1.1.1.8ColumnosdtGridGranularityread-onlycurrentSpacing of the grid that windows are bound to on the desktop. This makes organizing windows easier. The spacing is usually fine enough that the user does not n…
1.3.6.1.4.1.9600.1.22.1.1.1.9ColumnosdtIconSpacingread-onlycurrentSpacing between icons. Example: 75
1.3.6.1.4.1.9600.1.22.1.1.1.10ColumnosdtIconTitleFaceNameread-onlycurrentFont used for the names of the icons. Example: 'MS San Serif'
1.3.6.1.4.1.9600.1.22.1.1.1.11ColumnosdtIconTitleSizeread-onlycurrentIcon font size. Example: 9
1.3.6.1.4.1.9600.1.22.1.1.1.12ColumnosdtIconTitleWrapread-onlycurrentIcon's title text wraps to the next line.
1.3.6.1.4.1.9600.1.22.1.1.1.13ColumnosdtNameread-onlycurrentName that identifies the current desktop profile. Example: 'MainProf'
1.3.6.1.4.1.9600.1.22.1.1.1.14ColumnosdtPatternread-onlycurrentName of the pattern used as the background for the desktop.
1.3.6.1.4.1.9600.1.22.1.1.1.15ColumnosdtScreenSaverActiveread-onlycurrentScreen saver is active.
1.3.6.1.4.1.9600.1.22.1.1.1.16ColumnosdtScreenSaverExecutableread-onlycurrentName of the current screen saver executable file. Example: 'LOGON.SCR'
1.3.6.1.4.1.9600.1.22.1.1.1.17ColumnosdtScreenSaverSecureread-onlycurrentPassword is enabled for the screen saver.
1.3.6.1.4.1.9600.1.22.1.1.1.18ColumnosdtScreenSaverTimeoutread-onlycurrentAmount of time that passes before the screen saver starts.
1.3.6.1.4.1.9600.1.22.1.1.1.19ColumnosdtSettingIDread-onlycurrentIdentifier by which the CIM_Setting object is known.
1.3.6.1.4.1.9600.1.22.1.1.1.20ColumnosdtWallpaperread-onlycurrentFile name for the wallpaper design on the background of the desktop. Example: 'WINNT.BMP'
1.3.6.1.4.1.9600.1.22.1.1.1.21ColumnosdtWallpaperStretchedread-onlycurrentWallpaper is stretched to fill the entire screen. Microsoft Plus! must be installed before this option is available. If FALSE, the wallpaper retains its origin…
1.3.6.1.4.1.9600.1.22.1.1.1.22ColumnosdtWallpaperTiledread-onlycurrentWallpaper is tiled or centered.
1.3.6.1.4.1.9600.1.22.1.2Tablewin32EnvironmentTablenot-accessiblecurrentThe Win32_Environment WMI class represents an environment or system environment setting on a Windows computer system.
1.3.6.1.4.1.9600.1.22.1.2.1Rowwin32EnvironmentEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.1.2.1.1ColumnosevIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.1.2.1.2ColumnosevCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.1.2.1.3ColumnosevDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.1.2.1.4ColumnosevInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.1.2.1.5ColumnosevNameread-onlycurrentCharacter string specifying the name of a Windows environment variable. By specifying the name of a variable that does not yet exist, an application creates a …
1.3.6.1.4.1.9600.1.22.1.2.1.6ColumnosevStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.1.2.1.7ColumnosevSystemVariableread-onlycurrentIndicating whether the variable is a system variable. A system variable is set by the operating system, and is independent from user environment settings.
1.3.6.1.4.1.9600.1.22.1.2.1.8ColumnosevUserNameread-onlycurrentName of the owner of the environment setting. It is set to <SYSTEM> for settings that are specific to the Windows system (as opposed to a specific user) and <D…
1.3.6.1.4.1.9600.1.22.1.2.1.9ColumnosevVariableValueread-onlycurrentPlaceholder variable of a Windows environment variable. Information like the file system directory can change from computer to computer. The operating system s…
1.3.6.1.4.1.9600.1.22.1.3Tablewin32TimeZoneTablenot-accessiblecurrentThe Win32_TimeZone WMI class represents the time zone information for a Windows system, which includes changes needed for the daylight saving time transition.
1.3.6.1.4.1.9600.1.22.1.3.1Rowwin32TimeZoneEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.1.3.1.1ColumnostzIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.1.3.1.2ColumnostzBiasread-onlycurrentCurrent bias for local time translation. The bias is the difference between Universal Time Coordinate (UTC) and local time. All translations between UTC and lo…
1.3.6.1.4.1.9600.1.22.1.3.1.3ColumnostzCaptionread-onlycurrentShort description of the CIM_Setting object a one-line string.
1.3.6.1.4.1.9600.1.22.1.3.1.4ColumnostzDaylightBiasread-onlycurrentBias value to be used during local time translations that occur during daylight time. This property is ignored if a value for the DaylightDay property is not s…
1.3.6.1.4.1.9600.1.22.1.3.1.5ColumnostzDaylightDayread-onlycurrentDaylightDayOfWeek of the DaylightMonth when the transition from standard time to daylight saving time occurs on this operating system. Example: If the transiti…
1.3.6.1.4.1.9600.1.22.1.3.1.6ColumnostzDaylightDayOfWeekread-onlycurrentDay of the week when the transition from standard time to daylight saving time occurs on an operating system.
1.3.6.1.4.1.9600.1.22.1.3.1.7ColumnostzDaylightHourread-onlycurrentHour of the day when the transition from standard time to daylight saving time occurs on an operating system. Example: 2
1.3.6.1.4.1.9600.1.22.1.3.1.8ColumnostzDaylightMillisecondread-onlycurrentMillisecond of the DaylightSecond when the transition from standard time to daylight saving time occurs on an operating system.
1.3.6.1.4.1.9600.1.22.1.3.1.9ColumnostzDaylightMinuteread-onlycurrentMinute of the DaylightHour when the transition from standard time to daylight saving time occurs on an operating system. Example: 59
1.3.6.1.4.1.9600.1.22.1.3.1.10ColumnostzDaylightMonthread-onlycurrentMonth when the transition from standard time to daylight saving time occurs on an operating system.
1.3.6.1.4.1.9600.1.22.1.3.1.11ColumnostzDaylightNameread-onlycurrentTime zone being represented when daylight saving time is in effect. Example: 'EDT' (Eastern Daylight Time)
1.3.6.1.4.1.9600.1.22.1.3.1.12ColumnostzDaylightSecondread-onlycurrentSecond of the DaylightMinute when the transition from standard time to daylight saving time occurs on an operating system. Example: 59
1.3.6.1.4.1.9600.1.22.1.3.1.13ColumnostzDaylightYearread-onlycurrentYear when daylight saving time is in effect. This property is not required. Example: 1997
1.3.6.1.4.1.9600.1.22.1.3.1.14ColumnostzDescriptionread-onlycurrentDescription of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.1.3.1.15ColumnostzSettingIDread-onlycurrentIdentifier for the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.1.3.1.16ColumnostzStandardBiasread-onlycurrentBias value to use when daylight saving time is not in effect. This property is ignored if a value for StandardDay is not supplied. The value of this property i…
1.3.6.1.4.1.9600.1.22.1.3.1.17ColumnostzStandardDayread-onlycurrentStandardDayOfWeek of the StandardMonth when the transition from daylight saving time to standard time occurs on an operating system. If the transition day (Sta…
1.3.6.1.4.1.9600.1.22.1.3.1.18ColumnostzStandardDayOfWeekread-onlycurrentDay of the week when the transition from daylight saving time to standard time occurs on an operating system.
1.3.6.1.4.1.9600.1.22.1.3.1.19ColumnostzStandardHourread-onlycurrentHour of the day when the transition from daylight saving time to standard time occurs on an operating system. Example: 11
1.3.6.1.4.1.9600.1.22.1.3.1.20ColumnostzStandardMillisecondread-onlycurrentMillisecond of the StandardSecond when the transition from daylight saving time to standard time occurs on an operating system.
1.3.6.1.4.1.9600.1.22.1.3.1.21ColumnostzStandardMinuteread-onlycurrentMinute of the StandardDay when the transition from daylight saving time to standard time occurs on an operating system. Example: 59
1.3.6.1.4.1.9600.1.22.1.3.1.22ColumnostzStandardMonthread-onlycurrentMonth when the transition from daylight saving time to standard time occurs on an operating system.
1.3.6.1.4.1.9600.1.22.1.3.1.23ColumnostzStandardNameread-onlycurrentName of the time zone being represented when standard time is in effect. Example: 'EST' (Eastern Standard Time)
1.3.6.1.4.1.9600.1.22.1.3.1.24ColumnostzStandardSecondread-onlycurrentSecond of the StandardMinute when the transition from daylight saving time to standard time occurs on an operating system. Example: 59
1.3.6.1.4.1.9600.1.22.1.3.1.25ColumnostzStandardYearread-onlycurrentYear when standard time is in effect. This property is not required. Example: 1997
1.3.6.1.4.1.9600.1.22.2IdentitywmiDriverscurrentThe Drivers subcategory groups classes that represent virtual device drivers and system drivers for base services.
1.3.6.1.4.1.9600.1.22.2.1Tablewin32DriverVXDTablenot-accessiblecurrentThe Win32_DriverVXD WMI class represents a virtual device driver on a Windows computer system. A virtual device is a program that manages a system resource (su…
1.3.6.1.4.1.9600.1.22.2.1.1Rowwin32DriverVXDEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.2.1.1.1ColumnosvxdIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.2.1.1.2ColumnosvxdBuildNumberread-onlycurrentInternal identifier for this compilation of this software element.
1.3.6.1.4.1.9600.1.22.2.1.1.3ColumnosvxdCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.2.1.1.4ColumnosvxdCodeSetread-onlycurrentCode set used by this software element.
1.3.6.1.4.1.9600.1.22.2.1.1.5ColumnosvxdControlread-onlycurrentOffset address to the driver's control procedures. The virtual machine manager calls this procedure to send control messages to the virtual device system. The …
1.3.6.1.4.1.9600.1.22.2.1.1.6ColumnosvxdDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.2.1.1.7ColumnosvxdDeviceDescriptorBlockread-onlycurrentOffset address to the device descriptor block (DDB) structure. The DDB contains information that the operating system uses to execute the procedures of the dri…
1.3.6.1.4.1.9600.1.22.2.1.1.8ColumnosvxdIdentificationCoderead-onlycurrentManufacturer's identifier for this software element. Often this will be a stock-keeping unit (SKU) or a part number.
1.3.6.1.4.1.9600.1.22.2.1.1.9ColumnosvxdInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.2.1.1.10ColumnosvxdLanguageEditionread-onlycurrentLanguage edition of this software element. The language codes defined in ISO 639 should be used. Where the software element represents multi-lingual or interna…
1.3.6.1.4.1.9600.1.22.2.1.1.11ColumnosvxdManufacturerread-onlycurrentManufacturer of this software element.
1.3.6.1.4.1.9600.1.22.2.1.1.12ColumnosvxdNameread-onlycurrentName used to identify this software element.
1.3.6.1.4.1.9600.1.22.2.1.1.13ColumnosvxdOtherTargetOSread-onlycurrentManufacturer and operating system type for a software element when the TargetOperatingSystem property has a value of 1 (Other). Therefore, when the TargetOpera…
1.3.6.1.4.1.9600.1.22.2.1.1.14ColumnosvxdPMAPIread-onlycurrentOffset address to the protected mode application programming interface for this VXD. These functions can give applications direct access to the features of the…
1.3.6.1.4.1.9600.1.22.2.1.1.15ColumnosvxdSerialNumberread-onlycurrentAssigned serial number of this software element.
1.3.6.1.4.1.9600.1.22.2.1.1.16ColumnosvxdServiceTableSizeread-onlycurrentNumber of installed services and device driver services provided by the operating system. Example: 1024
1.3.6.1.4.1.9600.1.22.2.1.1.17ColumnosvxdSoftwareElementIDread-onlycurrentIdentifier for this software element, designed to be used in conjunction with other keys to create a unique representation of this CIM_SoftwareElement instance.
1.3.6.1.4.1.9600.1.22.2.1.1.18ColumnosvxdSoftwareElementStateread-onlycurrentState of a software element.
1.3.6.1.4.1.9600.1.22.2.1.1.19ColumnosvxdStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.2.1.1.20ColumnosvxdTargetOperatingSystemread-onlycurrentTarget operating system of the owning software element. The possible values for this property are as follows.
1.3.6.1.4.1.9600.1.22.2.1.1.21ColumnosvxdV86APIread-onlycurrentOffset to the application programming interface for use under virtual 8086 mode. These functions can give applications direct access to the features of the VXD.
1.3.6.1.4.1.9600.1.22.2.1.1.22ColumnosvxdVersionread-onlycurrentVersion of the VXD driver. Example: '3.51'
1.3.6.1.4.1.9600.1.22.2.2Tablewin32SystemDriverTablenot-accessiblecurrentThe Win32_SystemDriver WMI class represents the system driver for a base service.
1.3.6.1.4.1.9600.1.22.2.2.1Rowwin32SystemDriverEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.2.2.1.1ColumnossdIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.2.2.1.2ColumnossdAcceptPauseread-onlycurrentService can be paused.
1.3.6.1.4.1.9600.1.22.2.2.1.3ColumnossdAcceptStopread-onlycurrentService can be stopped.
1.3.6.1.4.1.9600.1.22.2.2.1.4ColumnossdCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.2.2.1.5ColumnossdCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.2.2.1.6ColumnossdDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.2.2.1.7ColumnossdDesktopInteractread-onlycurrentService can create or communicate with windows on the desktop.
1.3.6.1.4.1.9600.1.22.2.2.1.8ColumnossdDisplayNameread-onlycurrentDisplay name of the service. This string has a maximum length of 256 characters. The name is case-preserved in the Service Control Manager. DisplayName compari…
1.3.6.1.4.1.9600.1.22.2.2.1.9ColumnossdErrorControlread-onlycurrentSeverity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors …
1.3.6.1.4.1.9600.1.22.2.2.1.10ColumnossdExitCoderead-onlycurrentWindows error code defining any problems encountered in starting or stopping the service. This property is set to ERROR_SERVICE_SPECIFIC_ERROR (1066) when the …
1.3.6.1.4.1.9600.1.22.2.2.1.11ColumnossdInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.2.2.1.12ColumnossdNameread-onlycurrentUnique identifier for the service which provides an indication of the functionality that is managed. This functionality is described in more detail in the obje…
1.3.6.1.4.1.9600.1.22.2.2.1.13ColumnossdPathNameread-onlycurrentFully-qualified path to the service binary file that implements the service. Example: '\SystemRoot\System32\drivers\afd.sys'
1.3.6.1.4.1.9600.1.22.2.2.1.14ColumnossdServiceSpecificExitCoderead-onlycurrentService-specific error code for errors that occur while the service is either starting or stopping. The exit codes are defined by the service represented by th…
1.3.6.1.4.1.9600.1.22.2.2.1.15ColumnossdServiceTyperead-onlycurrentType of service provided to calling processes.
1.3.6.1.4.1.9600.1.22.2.2.1.16ColumnossdStartedread-onlycurrentService has been started.
1.3.6.1.4.1.9600.1.22.2.2.1.17ColumnossdStartModeread-onlycurrentSeverity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors …
1.3.6.1.4.1.9600.1.22.2.2.1.18ColumnossdStartNameread-onlycurrentAccount name under which the service runs. Depending on the service type, the account name may be in the form of DomainName\Username. The service process will …
1.3.6.1.4.1.9600.1.22.2.2.1.19ColumnossdStateread-onlycurrentCurrent state of the base service.
1.3.6.1.4.1.9600.1.22.2.2.1.20ColumnossdStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.2.2.1.21ColumnossdSystemCreationClassNameread-onlycurrentType name of the system that hosts this service.
1.3.6.1.4.1.9600.1.22.2.2.1.22ColumnossdSystemNameread-onlycurrentName of the system that hosts this service.
1.3.6.1.4.1.9600.1.22.2.2.1.23ColumnossdTagIdread-onlycurrentUnique tag value for this service in the group. A value of 0 indicates that the service has not been assigned a tag. A tag can be used for ordering service sta…
1.3.6.1.4.1.9600.1.22.3IdentitywmiFileSystemcurrentThe File System subcategory groups classes that represent the way a hard disk is logically arranged. This includes the type of file system used, the directory …
1.3.6.1.4.1.9600.1.22.3.1Tablewin32DiskPartitionTablenot-accessiblecurrentThe Win32_DiskPartition WMI class represents the capabilities and management capacity of a partitioned area of a physical disk on a Windows system. Example: Di…
1.3.6.1.4.1.9600.1.22.3.1.1Rowwin32DiskPartitionEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.3.1.1.1ColumnosdpIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.3.1.1.2ColumnosdpAccessread-onlycurrentMedia access available.
1.3.6.1.4.1.9600.1.22.3.1.1.3ColumnosdpAvailabilityread-onlycurrentAvailability and status of the device. Power Save - Unknown indicates that the device is known to be in a power save mode, but its exact status is unknown; Pow…
1.3.6.1.4.1.9600.1.22.3.1.1.4ColumnosdpBlockSizeread-onlycurrentSize in bytes of the blocks which form this storage extent. If unknown or if a block concept is not valid (for example, for aggregate extents, memory or logica…
1.3.6.1.4.1.9600.1.22.3.1.1.5ColumnosdpBootableread-onlycurrentComputer may be booted from this partition.
1.3.6.1.4.1.9600.1.22.3.1.1.6ColumnosdpBootPartitionread-onlycurrentPartition is the active partition. The operating system uses the active partition when booting from a hard disk.
1.3.6.1.4.1.9600.1.22.3.1.1.7ColumnosdpCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.3.1.1.8ColumnosdpConfigManagerErrorCoderead-onlycurrentWindows Configuration Manager error code.
1.3.6.1.4.1.9600.1.22.3.1.1.9ColumnosdpConfigManagerUserConfigread-onlycurrentDevice is using a user-defined configuration.
1.3.6.1.4.1.9600.1.22.3.1.1.10ColumnosdpCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.3.1.1.11ColumnosdpDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.3.1.1.12ColumnosdpDeviceIDread-onlycurrentUnique identifier of the disk drive and partition, from the rest of the system.
1.3.6.1.4.1.9600.1.22.3.1.1.13ColumnosdpDiskIndexread-onlycurrentIndex number of the disk containing this partition. Example: 0
1.3.6.1.4.1.9600.1.22.3.1.1.14ColumnosdpErrorClearedread-onlycurrentError reported in LastErrorCode is now cleared.
1.3.6.1.4.1.9600.1.22.3.1.1.15ColumnosdpErrorDescriptionread-onlycurrentInformation about the error recorded in LastErrorCode, and information on any corrective actions that may be taken.
1.3.6.1.4.1.9600.1.22.3.1.1.16ColumnosdpErrorMethodologyread-onlycurrentType of error detection and correction supported by this storage extent.
1.3.6.1.4.1.9600.1.22.3.1.1.17ColumnosdpHiddenSectorsread-onlycurrentNumber of hidden sectors in the partition. Example: 63
1.3.6.1.4.1.9600.1.22.3.1.1.18ColumnosdpPartitionIndexread-onlycurrentIndex number of the partition. Example: 1
1.3.6.1.4.1.9600.1.22.3.1.1.19ColumnosdpInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.3.1.1.20ColumnosdpLastErrorCoderead-onlycurrentLast error code reported by the logical device.
1.3.6.1.4.1.9600.1.22.3.1.1.21ColumnosdpNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property.
1.3.6.1.4.1.9600.1.22.3.1.1.22ColumnosdpNumberOfBlocksread-onlycurrentTotal number of consecutive blocks, each block the size of the value contained in the BlockSize property, which form this storage extent. Total size of the sto…
1.3.6.1.4.1.9600.1.22.3.1.1.23ColumnosdpPNPDeviceIDread-onlycurrentWindows Plug and Play device identifier of the logical device. Example: '*PNP030b'
1.3.6.1.4.1.9600.1.22.3.1.1.24ColumnosdpPowerManagementCapabilitiesread-onlycurrentSpecific power-related capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled but the exact fea…
1.3.6.1.4.1.9600.1.22.3.1.1.25ColumnosdpPowerManagementSupportedread-onlycurrentDevice can be power-managed (can be put into suspend mode, and so on). The property does not indicate that power management features are currently enabled, onl…
1.3.6.1.4.1.9600.1.22.3.1.1.26ColumnosdpPrimaryPartitionread-onlycurrentPrimary partition.
1.3.6.1.4.1.9600.1.22.3.1.1.27ColumnosdpPurposeread-onlycurrentDescription of the media and/or its use.
1.3.6.1.4.1.9600.1.22.3.1.1.28ColumnosdpRewritePartitionread-onlycurrentPartition information has changed. When you change a partition (with IOCTL_DISK_SET_DRIVE_LAYOUT), the system uses this property to determine which partitions …
1.3.6.1.4.1.9600.1.22.3.1.1.29ColumnosdpSizeread-onlycurrentTotal size of the partition. Example: 1059045376
1.3.6.1.4.1.9600.1.22.3.1.1.30ColumnosdpStartingOffsetread-onlycurrentStarting offset (in bytes) of the partition. Example: 32256
1.3.6.1.4.1.9600.1.22.3.1.1.31ColumnosdpStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.3.1.1.32ColumnosdpStatusInforead-onlycurrentState of the logical device. If this property does not apply to the logical device, the value 5 (Not Applicable) should be used.
1.3.6.1.4.1.9600.1.22.3.1.1.33ColumnosdpSystemCreationClassNameread-onlycurrentCreation class name of the scoping system.
1.3.6.1.4.1.9600.1.22.3.1.1.34ColumnosdpSystemNameread-onlycurrentName of the scoping system.
1.3.6.1.4.1.9600.1.22.3.1.1.35ColumnosdpTyperead-onlycurrentType of the partition. Values are: 'Unused' '12-bit FAT' 'Xenix Type 1' 'Xenix Type 2' '16-bit FAT' 'Extended Partition' 'MS-DOS V4 Huge' 'Installable File Sys…
1.3.6.1.4.1.9600.1.22.3.2Tablewin32LogicalDiskTablenot-accessiblecurrentThe Win32_LogicalDisk WMI class represents a data source that resolves to an actual local storage device on a Windows system.
1.3.6.1.4.1.9600.1.22.3.2.1Rowwin32LogicalDiskEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.3.2.1.1ColumnosldIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.3.2.1.2ColumnosldAccessread-onlycurrentType of media access available. This property is inherited from CIM_StorageExtent.
1.3.6.1.4.1.9600.1.22.3.2.1.3ColumnosldAvailabilityread-onlycurrentAvailability and status of the device. Power Save - Unknown indicates that the device is known to be in a power save mode, but its exact status is unknown; Pow…
1.3.6.1.4.1.9600.1.22.3.2.1.4ColumnosldBlockSizeread-onlycurrentSize in bytes of the blocks that form this storage extent. If unknown or if a block concept is not valid (for example, for aggregate extents, memory or logical…
1.3.6.1.4.1.9600.1.22.3.2.1.5ColumnosldCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.3.2.1.6ColumnosldCompressedread-onlycurrentIf TRUE, the logical volume exists as a single compressed entity, such as a DoubleSpace volume. If file based compression is supported (such as on NTFS), this …
1.3.6.1.4.1.9600.1.22.3.2.1.7ColumnosldConfigManagerErrorCoderead-onlycurrentWindows Configuration Manager error code. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.8ColumnosldConfigManagerUserConfigread-onlycurrentIf TRUE, the device is using a user-defined configuration. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.9ColumnosldCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.3.2.1.10ColumnosldDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.3.2.1.11ColumnosldDeviceIDread-onlycurrentUnique identifier of the logical disk from other devices on the system. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.12ColumnosldDriveTyperead-onlycurrentNumeric value corresponding to the type of disk drive this logical disk represents.
1.3.6.1.4.1.9600.1.22.3.2.1.13ColumnosldErrorClearedread-onlycurrentIf TRUE, the error reported in LastErrorCode is now cleared. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.14ColumnosldErrorDescriptionread-onlycurrentMore information about the error recorded in LastErrorCode, and information on any corrective actions that may be taken. This property is inherited from CIM_Lo…
1.3.6.1.4.1.9600.1.22.3.2.1.15ColumnosldErrorMethodologyread-onlycurrentType of error detection and correction supported by this storage extent. This property is inherited from CIM_StorageExtent.
1.3.6.1.4.1.9600.1.22.3.2.1.16ColumnosldFileSystemread-onlycurrentFile system on the logical disk. Example: 'NTFS'
1.3.6.1.4.1.9600.1.22.3.2.1.17ColumnosldFreeSpaceread-onlycurrentSpace available on the logical disk. This property is inherited from CIM_LogicalDisk.
1.3.6.1.4.1.9600.1.22.3.2.1.18ColumnosldInstallDateread-onlycurrentDate and time the object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_Manag…
1.3.6.1.4.1.9600.1.22.3.2.1.19ColumnosldLastErrorCoderead-onlycurrentLast error code reported by the logical device. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.20ColumnosldMaximumComponentLengthread-onlycurrentMaximum length of a filename component supported by the Windows drive. A filename component is that portion of a filename between backslashes. The value can be…
1.3.6.1.4.1.9600.1.22.3.2.1.21ColumnosldMediaTyperead-onlycurrentType of media currently present in the logical drive. This value will be one of the values of the MEDIA_TYPE enumeration defined in Winioctl.h. The value may n…
1.3.6.1.4.1.9600.1.22.3.2.1.22ColumnosldNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElem…
1.3.6.1.4.1.9600.1.22.3.2.1.23ColumnosldNumberOfBlocksread-onlycurrentTotal number of consecutive blocks, each block the size of the value contained in the BlockSize property, which form this storage extent. Total size of the sto…
1.3.6.1.4.1.9600.1.22.3.2.1.24ColumnosldPNPDeviceIDread-onlycurrentWindows Plug and Play device identifier of the logical device. This property is inherited from CIM_LogicalDevice. Example: '*PNP030b'
1.3.6.1.4.1.9600.1.22.3.2.1.25ColumnosldPowerManagementCapabilitiesread-onlycurrentArray of the specific power-related capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled but …
1.3.6.1.4.1.9600.1.22.3.2.1.26ColumnosldPowerManagementSupportedread-onlycurrentIf TRUE, the device can be power-managed (can be put into suspend mode, and so on). The property does not indicate that power management features are currently…
1.3.6.1.4.1.9600.1.22.3.2.1.27ColumnosldProviderNameread-onlycurrentNetwork path to the logical device.
1.3.6.1.4.1.9600.1.22.3.2.1.28ColumnosldPurposeread-onlycurrentFree-form string describing the media and/or its use. This property is inherited from CIM_StorageExtent.
1.3.6.1.4.1.9600.1.22.3.2.1.29ColumnosldQuotasDisabledread-onlycurrentIndicates that quota management is not enabled (TRUE) on this system. This property is new for Windows XP.
1.3.6.1.4.1.9600.1.22.3.2.1.30ColumnosldQuotasIncompleteread-onlycurrentIndicates that the quota management was used but has been disabled (TRUE). Incomplete refers to the information left in the file system after quota management …
1.3.6.1.4.1.9600.1.22.3.2.1.31ColumnosldQuotasRebuildingread-onlycurrentIndicates that the file system is in the active process of compiling information and setting the disk up for quota management. This property is new for Windows…
1.3.6.1.4.1.9600.1.22.3.2.1.32ColumnosldSizeread-onlycurrentSize of the disk drive. This property is inherited from CIM_LogicalDisk.
1.3.6.1.4.1.9600.1.22.3.2.1.33ColumnosldStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.3.2.1.34ColumnosldStatusInforead-onlycurrentState of the logical device. If this property does not apply to the logical device, the value 5 (Not Applicable) should be used. This property is inherited fro…
1.3.6.1.4.1.9600.1.22.3.2.1.35ColumnosldSupportsDiskQuotasread-onlycurrentIf TRUE, this volume supports disk quotas. This property is new for Windows XP.
1.3.6.1.4.1.9600.1.22.3.2.1.36ColumnosldSupportsFileBasedCompressionread-onlycurrentIf TRUE, the logical disk partition supports file based compression, such as is the case with NTFS file system. This property is FALSE, when the Compressed pro…
1.3.6.1.4.1.9600.1.22.3.2.1.37ColumnosldSystemCreationClassNameread-onlycurrentValue of the scoping computer's CreationClassName property. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.38ColumnosldSystemNameread-onlycurrentName of the scoping system. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.2.1.39ColumnosldVolumeDirtyread-onlycurrentIf TRUE, the disk requires ChkDsk to be run at next boot up. This property is only applicable to those instances of logical disk that represent a physical disk…
1.3.6.1.4.1.9600.1.22.3.2.1.40ColumnosldVolumeNameread-onlycurrentVolume name of the logical disk. Constraints: maximum 32 characters.
1.3.6.1.4.1.9600.1.22.3.2.1.41ColumnosldVolumeSerialNumberread-onlycurrentVolume serial number of the logical disk. Constraints: maximum 11 characters. Example: 'A8C3-D032'
1.3.6.1.4.1.9600.1.22.3.3Tablewin32MappedLogicalDiskTablenot-accessiblecurrentThe Win32_MappedLogicalDisk WMI class represents network storage devices that are mapped as logical disks on the computer system.
1.3.6.1.4.1.9600.1.22.3.3.1Rowwin32MappedLogicalDiskEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.3.3.1.1ColumnosmldIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.3.3.1.2ColumnosmldAccessread-onlycurrentDevice access state. This property is inherited from CIM_StorageExtent.
1.3.6.1.4.1.9600.1.22.3.3.1.3ColumnosmldAvailabilityread-onlycurrentAvailability and status of the device. Power Save - Unknown indicates that the device is known to be in a power save mode, but its exact status is unknown; Pow…
1.3.6.1.4.1.9600.1.22.3.3.1.4ColumnosmldBlockSizeread-onlycurrentSize, in bytes, of the blocks which form this storage extent. If this concept is not valid for the device type, the value is 1. This property is inherited from…
1.3.6.1.4.1.9600.1.22.3.3.1.5ColumnosmldCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.3.3.1.6ColumnosmldCompressedread-onlycurrentIf TRUE, the file is compressed. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.3.3.1.7ColumnosmldConfigManagerErrorCoderead-onlycurrentWindows Configuration Manager error code. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.3.1.8ColumnosmldConfigManagerUserConfigread-onlycurrentIf TRUE, the device is using a user-defined configuration. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.3.1.9ColumnosmldCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.3.3.1.10ColumnosmldDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.3.3.1.11ColumnosmldDeviceIDread-onlycurrentUnique identifier of the memory array. This property is inherited from CIM_LogicalDevice. Example: 'Memory Array 1'
1.3.6.1.4.1.9600.1.22.3.3.1.12ColumnosmldErrorClearedread-onlycurrentIf TRUE, the error reported in LastErrorCode is now cleared. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.3.1.13ColumnosmldErrorDescriptionread-onlycurrentMore information about the error recorded in LastErrorCode, and information on any corrective actions that may be taken. This property is inherited from CIM_Lo…
1.3.6.1.4.1.9600.1.22.3.3.1.14ColumnosmldErrorMethodologyread-onlycurrentTypes of error checking used by the hardware. This property is inherited from CIM_StorageExtent.
1.3.6.1.4.1.9600.1.22.3.3.1.15ColumnosmldFileSystemread-onlycurrentFile system on the logical disk. Example: 'NTFS'
1.3.6.1.4.1.9600.1.22.3.3.1.16ColumnosmldFreeSpaceread-onlycurrentSpace available on the logical disk. This property is inherited from CIM_LogicalDisk.
1.3.6.1.4.1.9600.1.22.3.3.1.17ColumnosmldInstallDateread-onlycurrentDate and time when the object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_…
1.3.6.1.4.1.9600.1.22.3.3.1.18ColumnosmldLastErrorCoderead-onlycurrentLast error code reported by the logical device. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.3.1.19ColumnosmldMaximumComponentLengthread-onlycurrentContains the maximum length of a filename component supported by the Windows drive. Example: 255
1.3.6.1.4.1.9600.1.22.3.3.1.20ColumnosmldNameread-onlycurrentObject label. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.3.3.1.21ColumnosmldNumberOfBlocksread-onlycurrentTotal number of consecutive blocks, each block the size of the value contained in the BlockSize property, which form this storage extent. Total size of the sto…
1.3.6.1.4.1.9600.1.22.3.3.1.22ColumnosmldPNPDeviceIDread-onlycurrentWindows Plug and Play device identifier of the logical device. This property is inherited from CIM_LogicalDevice. Example: '*PNP030b'
1.3.6.1.4.1.9600.1.22.3.3.1.23ColumnosmldPowerManagementCapabilitiesread-onlycurrentArray of the specific power-related capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled but …
1.3.6.1.4.1.9600.1.22.3.3.1.24ColumnosmldPowerManagementSupportedread-onlycurrentIf TRUE, the device can be power-managed (can be put into suspend mode, and so on). The property does not indicate that power management features are currently…
1.3.6.1.4.1.9600.1.22.3.3.1.25ColumnosmldProviderNameread-onlycurrentNetwork path name to the logical device.
1.3.6.1.4.1.9600.1.22.3.3.1.26ColumnosmldPurposeread-onlycurrentFree-form string describing the media and/or its use. This property is inherited from CIM_StorageExtent.
1.3.6.1.4.1.9600.1.22.3.3.1.27ColumnosmldQuotasDisabledread-onlycurrentIf TRUE, quota management is not enabled for this volume.
1.3.6.1.4.1.9600.1.22.3.3.1.28ColumnosmldQuotasIncompleteread-onlycurrentIf TRUE, quota management was used but has been disabled. Incomplete refers to the information left in the file system after quota management has been disabled.
1.3.6.1.4.1.9600.1.22.3.3.1.29ColumnosmldQuotasRebuildingread-onlycurrentIf TRUE, the file system is setting up for quota management.
1.3.6.1.4.1.9600.1.22.3.3.1.30ColumnosmldSessionIDread-onlycurrentID of the user's session. The user may be connected using a local login or a terminal session.
1.3.6.1.4.1.9600.1.22.3.3.1.31ColumnosmldSizeread-onlycurrentSize of the logical disk.
1.3.6.1.4.1.9600.1.22.3.3.1.32ColumnosmldStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.3.3.1.33ColumnosmldStatusInforead-onlycurrentState of the logical device. If this property does not apply to the logical device, the value 5 (Not Applicable) should be used. This property is inherited fro…
1.3.6.1.4.1.9600.1.22.3.3.1.34ColumnosmldSupportsDiskQuotasread-onlycurrentIf TRUE, this volume supports disk quotas.
1.3.6.1.4.1.9600.1.22.3.3.1.35ColumnosmldSupportFileBasedCompressionread-onlycurrentIf TRUE, the logical disk partition supports file based compression, such as is the case with NTFS. This property is FALSE, when the Compressed property is TRU…
1.3.6.1.4.1.9600.1.22.3.3.1.36ColumnosmldSystemCreationClassNameread-onlycurrentValue of the scoping computer's CreationClassName property. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.3.1.37ColumnosmldSystemNameread-onlycurrentName of the scoping system. This property is inherited from CIM_LogicalDevice.
1.3.6.1.4.1.9600.1.22.3.3.1.38ColumnosmldVolumeNameread-onlycurrentVolume name of the logical disk. This property value may have a maximum of 32 characters.
1.3.6.1.4.1.9600.1.22.3.3.1.39ColumnosmldVolumeSerialNumberread-onlycurrentVolume serial number of the logical disk. This property value may have a maximum of 11 characters. This property is inherited from CIM_LogicalDevice. Example: …
1.3.6.1.4.1.9600.1.22.3.4Tablewin32QuotaSettingTablenot-accessiblecurrentThe Win32_QuotaSetting WMI class contains setting information for disk quotas on a volume. This class is new for Windows XP.
1.3.6.1.4.1.9600.1.22.3.4.1Rowwin32QuotaSettingEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.3.4.1.1ColumnosqsIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.3.4.1.2ColumnosqsCaptionread-onlycurrentShort description of the object a one line string. This property is inherited from CIM_Setting.
1.3.6.1.4.1.9600.1.22.3.4.1.3ColumnosqsDefaultLimitread-onlycurrentDefault limit set for quotas on this specific volume.
1.3.6.1.4.1.9600.1.22.3.4.1.4ColumnosqsDefaultWarningLimitread-onlycurrentDefault warning limit set for quotas on this specific volume.
1.3.6.1.4.1.9600.1.22.3.4.1.5ColumnosqsDescriptionread-onlycurrentComment that describes the link. This property is inherited from CIM_Setting.
1.3.6.1.4.1.9600.1.22.3.4.1.6ColumnosqsExceededNotificationread-onlycurrentIf TRUE, events are written to the event log when quotas are exceeded.
1.3.6.1.4.1.9600.1.22.3.4.1.7ColumnosqsSettingIDread-onlycurrentName of a CIM_Setting object.
1.3.6.1.4.1.9600.1.22.3.4.1.8ColumnosqsStateread-onlycurrentLevel of quota management set for this volume.
1.3.6.1.4.1.9600.1.22.3.4.1.9ColumnosqsVolumePathread-onlycurrentName of the volume where disk quotas are located. It can be volume name, volume path (such as D:\\), or it can be the unique volume name (such as '\\\\?Volume{…
1.3.6.1.4.1.9600.1.22.3.4.1.10ColumnosqsWarningExceededNotificationread-onlycurrentIf TRUE, events are written to the event log when warnings are exceeded.
1.3.6.1.4.1.9600.1.22.3.5Tablewin32VolumeTablenot-accessiblecurrentThe Win32_Volume class represents an area of storage on a hard disk. The class returns local volumes that are formatted, unformatted, mounted, or offline. A vo…
1.3.6.1.4.1.9600.1.22.3.5.1Rowwin32VolumeEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.3.5.1.1ColumnosvlIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.3.5.1.2ColumnosvlAutomountread-onlycurrentIf true, the volume is mounted to the file system automatically when the first I/O is issued. If false, the volume is not mounted until explicitly mounted by u…
1.3.6.1.4.1.9600.1.22.3.5.1.3ColumnosvlCapacityread-onlycurrentSize of the volume in bytes.
1.3.6.1.4.1.9600.1.22.3.5.1.4ColumnosvlCompressedread-onlycurrentIf true the volume exists as one compressed entity, such as a DoubleSpace volume. If file-based compression is supported, such as the NTFS file system, this pr…
1.3.6.1.4.1.9600.1.22.3.5.1.5ColumnosvlDeviceIdread-onlycurrentUnique identifier for the volume on this system.
1.3.6.1.4.1.9600.1.22.3.5.1.6ColumnosvlDirtyBitSetread-onlycurrentIf true, the Chkdsk method is automatically run by the system at the next boot up.
1.3.6.1.4.1.9600.1.22.3.5.1.7ColumnosvlDriveLetterread-onlycurrentDrive letter assigned to a volume. This property is NULL for volumes without drive letters.
1.3.6.1.4.1.9600.1.22.3.5.1.8ColumnosvlDriveTyperead-onlycurrentNumeric value that corresponds to the type of disk drive that this logical disk represents.
1.3.6.1.4.1.9600.1.22.3.5.1.9ColumnosvlFileSystemread-onlycurrentFile system on the logical disk. Example: NTFS
1.3.6.1.4.1.9600.1.22.3.5.1.10ColumnosvlFreeSpaceread-onlycurrentNumber of bytes of available space on the volume.
1.3.6.1.4.1.9600.1.22.3.5.1.11ColumnosvlIndexingEnabledread-onlycurrentIf true, context indexing is enabled.
1.3.6.1.4.1.9600.1.22.3.5.1.12ColumnosvlLabelread-onlycurrentVolume name of the logical disk. This property is null for volumes without a label. For FAT, FAT32 systems the maximum length is 11 characters. For NTFS file s…
1.3.6.1.4.1.9600.1.22.3.5.1.13ColumnosvlMaximumFileNameLengthread-onlycurrentMaximum length, in characters, of a filename component supported by a Windows drive. A filename component is the portion of a filename between backslashes. Thi…
1.3.6.1.4.1.9600.1.22.3.5.1.14ColumnosvlQuotasEnabledread-onlycurrentIf true, quota management is enabled for this volume.
1.3.6.1.4.1.9600.1.22.3.5.1.15ColumnosvlQuotasIncompleteread-onlycurrentIf true, quota management was used but is disabled. Incomplete refers to the information left in the file system after quota management is disabled.
1.3.6.1.4.1.9600.1.22.3.5.1.16ColumnosvlQuotasRebuildingread-onlycurrentIf true, the file system is in the process of compiling information and setting the disk up for quota management.
1.3.6.1.4.1.9600.1.22.3.5.1.17ColumnosvlSerialNumberread-onlycurrentSerial number of the volume. Example: A8C3D032
1.3.6.1.4.1.9600.1.22.3.5.1.18ColumnosvlSupportsDiskQuotasread-onlycurrentIf true, the volume supports disk quotas.
1.3.6.1.4.1.9600.1.22.3.5.1.19ColumnosvlSupportsFileBasedCompressionread-onlycurrentIf true, the volume supports file-based compression like the NTFS file system.
1.3.6.1.4.1.9600.1.22.4IdentitywmiJobObjectscurrentThe Job Objects subcategory groups classes that represent classes that provide the means of instrumenting named job objects. An unnamed job object cannot be in…
1.3.6.1.4.1.9600.1.22.4.1Tablewin32NamedJobObjectTablenot-accessiblecurrentThe Win32_NamedJobObject WMI class represents a kernel object that is used to group processes for controlling the life and resources of the processes within th…
1.3.6.1.4.1.9600.1.22.4.1.1Rowwin32NamedJobObjectEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.4.1.1.1ColumnosnjoIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.4.1.1.2ColumnosnjoBasicUIRestrictionsread-onlycurrentRestrictions on a job regarding the user interface.
1.3.6.1.4.1.9600.1.22.4.1.1.3ColumnosnjoCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.4.1.1.4ColumnosnjoCollectionIDread-onlycurrentNumber that identifies a job object. Because they are kernel objects, job object names are case sensitive. However, Windows Management Instrumentation (WMI) ke…
1.3.6.1.4.1.9600.1.22.4.1.1.5ColumnosnjoDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.4.2Tablewin32NamedJobObjectActgInfoTablenot-accessiblecurrentThe Win32_NamedJobObjectActgInfo WMI class class represents the I/O accounting information for a job object. This class is new for Windows XP.
1.3.6.1.4.1.9600.1.22.4.2.1Rowwin32NamedJobObjectActgInfoEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.4.2.1.1ColumnosjoaIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.4.2.1.2ColumnosjoaActiveProcessesread-onlycurrentTotal number of processes associated with a job. When a process is associated with a job, but the association fails because of a limit violation, the value is …
1.3.6.1.4.1.9600.1.22.4.2.1.3ColumnosjoaCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.4.2.1.4ColumnosjoaDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_StatisticalInformation.
1.3.6.1.4.1.9600.1.22.4.2.1.5ColumnosjoaNameread-onlycurrentLabel by which the statistic or metric is known. When subclassed, the property can be overridden to be a key property. This property overrides the Name propert…
1.3.6.1.4.1.9600.1.22.4.2.1.6ColumnosjoaOtherOperationCountread-onlycurrentNumber of I/O operations performed other than read and write operations by all processes that have been associated with the job including all processes current…
1.3.6.1.4.1.9600.1.22.4.2.1.7ColumnosjoaOtherTransferCountread-onlycurrentNumber of bytes transferred during operations other than read and write by all processes that have been associated with the job including all processes current…
1.3.6.1.4.1.9600.1.22.4.2.1.8ColumnosjoaPeakJobMemoryUsedread-onlycurrentPeak memory in kilobyte usage of all processes associated with the job.
1.3.6.1.4.1.9600.1.22.4.2.1.9ColumnosjoaPeakProcessMemoryUsedread-onlycurrentThe most process memory in kilobytes used by any process ever associated with the job.
1.3.6.1.4.1.9600.1.22.4.2.1.10ColumnosjoaReadOperationCountread-onlycurrentNumber of read operations performed by all processes that have ever been associated with the job, in addition to all processes currently associated with the jo…
1.3.6.1.4.1.9600.1.22.4.2.1.11ColumnosjoaReadTransferCountread-onlycurrentNumber of bytes read by all processes that have been associated with the job including all processes currently associated with the job.
1.3.6.1.4.1.9600.1.22.4.2.1.12ColumnosjoaThisPeriodTotalKernelTimeread-onlycurrentTotal amount of kernel-mode execution time, in 100 nanosecond units, for all active processes associated with the job (and all terminated processes no longer a…
1.3.6.1.4.1.9600.1.22.4.2.1.13ColumnosjoaThisPeriodTotalUserTimeread-onlycurrentTotal amount of user-mode execution time, in 100 nanosecond units, for all active processes associated with the job (and all terminated processes no longer ass…
1.3.6.1.4.1.9600.1.22.4.2.1.14ColumnosjoaTotalKernelTimeread-onlycurrentTotal amount of kernel-mode execution time, in 100 nanosecond units, for all active processes associated with the job, as well as all terminated processes no l…
1.3.6.1.4.1.9600.1.22.4.2.1.15ColumnosjoaTotalPageFaultCountread-onlycurrentTotal number of page faults encountered by all active processes associated with the job, as well as all terminated processes no longer associated with the job.
1.3.6.1.4.1.9600.1.22.4.2.1.16ColumnosjoaTotalProcessesread-onlycurrentTotal number of processes associated with the job during its lifetime, including those that are terminated. For example, when a process is associated with a jo…
1.3.6.1.4.1.9600.1.22.4.2.1.17ColumnosjoaTotalTerminatedProcessesread-onlycurrentTotal number of processes terminated because of a limit violation.
1.3.6.1.4.1.9600.1.22.4.2.1.18ColumnosjoaTotalUserTimeread-onlycurrentTotal amount of user-mode execution time, in 100 nanosecond units, for all active processes associated with a job, and all terminated processes not associated …
1.3.6.1.4.1.9600.1.22.4.2.1.19ColumnosjoaWriteOperationCountread-onlycurrentNumber of write operations performed by all processes that have been associated with a job, and all processes currently associated with the job.
1.3.6.1.4.1.9600.1.22.4.2.1.20ColumnosjoaWriteTransferCountread-onlycurrentNumber of bytes written by all processes that have been associated with a job, and all processes currently associated with a job.
1.3.6.1.4.1.9600.1.22.4.3Tablewin32NamedJobObjectLimitSetTablenot-accessiblecurrentThe Win32_NamedJobObjectLimitSetting WMI class represents the limit settings for a job object. This class is new for Windows XP.
1.3.6.1.4.1.9600.1.22.4.3.1Rowwin32NamedJobObjectLimitSetEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.4.3.1.1ColumnosjolIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.4.3.1.2ColumnosjolActiveProcessLimitread-onlycurrentActive process limit for a job. If associating a process with a job causes the active process count to exceed the limit, the process is terminated and the asso…
1.3.6.1.4.1.9600.1.22.4.3.1.3ColumnosjolAffinityread-onlycurrentProcessor affinity for all processes associated with a job. The affinity of each thread is set to this value, but threads are free to set the affinity subseque…
1.3.6.1.4.1.9600.1.22.4.3.1.4ColumnosjolCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.4.3.1.5ColumnosjolDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.4.3.1.6ColumnosjolJobMemoryLimitread-onlycurrentPer-job memory limit in kilobytes. This property is ignored unless LimitFlags specifies the Limit Job Memory value.
1.3.6.1.4.1.9600.1.22.4.3.1.7ColumnosjolLimitFlagsread-onlycurrentBitmap that represents the job limits. One or more of the limits can be in effect at the same time.
1.3.6.1.4.1.9600.1.22.4.3.1.8ColumnosjolMaximumWorkingSetSizeread-onlycurrentMaximum working set size for all processes associated with a job. This property is ignored unless LimitFlags specifies the Limit Working Set value.
1.3.6.1.4.1.9600.1.22.4.3.1.9ColumnosjolMinimumWorkingSetSizeread-onlycurrentMinimum working set size for all processes associated with a job. This property is ignored unless LimitFlags specifies the Limit Working Set value.
1.3.6.1.4.1.9600.1.22.4.3.1.10ColumnosjolPerJobUserTimeLimitread-onlycurrentPer-job user mode execution time limit, in 100 nanosecond units. The system adds the current time of the processes associated with the job to this limit. For e…
1.3.6.1.4.1.9600.1.22.4.3.1.11ColumnosjolPerProcessUserTimeLimitread-onlycurrentPer-process user mode execution time limit, in 100-nanosecond units. This property is ignored unless LimitFlags specifies Limit Process Time. The system period…
1.3.6.1.4.1.9600.1.22.4.3.1.12ColumnosjolPriorityClassread-onlycurrentPriority class for all processes associated with the job. Processes and threads cannot modify their priority class. This property is ignored unless LimitFlags …
1.3.6.1.4.1.9600.1.22.4.3.1.13ColumnosjolProcessMemoryLimitread-onlycurrentPer-process memory limit in kilobytes. This property is ignored unless LimitFlags specifies the Limit Process Memory value.
1.3.6.1.4.1.9600.1.22.4.3.1.14ColumnosjolSchedulingClassread-onlycurrentScheduling class for all processes associated with the job. The valid values are 0 to 9. Use 0 (zero) for the least favorable scheduling class relative to othe…
1.3.6.1.4.1.9600.1.22.4.3.1.15ColumnosjolSettingIDread-onlycurrentJob object limit setting instance. Because they are kernel objects, job object names are case-sensitive. However, Windows Management Instrumentation (WMI) keys…
1.3.6.1.4.1.9600.1.22.5IdentitywmiPageFilescurrentThe Memory and Page files subcategory groups classes that represent page file configuration settings.
1.3.6.1.4.1.9600.1.22.5.1Tablewin32PageFileTablenot-accessiblecurrentThe Win32_PageFile WMI class represents the file used for handling virtual memory file swapping on a Win32 system. This class has been deprecated.
1.3.6.1.4.1.9600.1.22.5.1.1Rowwin32PageFileEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.5.1.1.1ColumnospfIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.5.1.1.2ColumnospfAccessMaskread-onlycurrentList of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under …
1.3.6.1.4.1.9600.1.22.5.1.1.3ColumnospfArchiveread-onlycurrentFile should be archived.
1.3.6.1.4.1.9600.1.22.5.1.1.4ColumnospfCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.5.1.1.5ColumnospfCompressedread-onlycurrentFile is compressed.
1.3.6.1.4.1.9600.1.22.5.1.1.6ColumnospfCompressionMethodread-onlycurrentAlgorithm or tool used to compress the logical file. If it is not possible (or not desired) to describe the compression scheme (perhaps because it is not known…
1.3.6.1.4.1.9600.1.22.5.1.1.7ColumnospfCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.5.1.1.8ColumnospfCreationDateread-onlycurrentFile creation date.
1.3.6.1.4.1.9600.1.22.5.1.1.9ColumnospfCSCreationClassNameread-onlycurrentClass of the computer system.
1.3.6.1.4.1.9600.1.22.5.1.1.10ColumnospfCSNameread-onlycurrentName of the computer system.
1.3.6.1.4.1.9600.1.22.5.1.1.11ColumnospfDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.5.1.1.12ColumnospfDriveread-onlycurrentDrive letter (including colon) of the file. Example: 'c:'
1.3.6.1.4.1.9600.1.22.5.1.1.13ColumnospfEightDotThreeFileNameread-onlycurrentDOS-compatible file name for this file. Example: 'c:\progra~1'
1.3.6.1.4.1.9600.1.22.5.1.1.14ColumnospfEncryptedread-onlycurrentFile is encrypted.
1.3.6.1.4.1.9600.1.22.5.1.1.15ColumnospfEncryptionMethodread-onlycurrentAlgorithm or tool used to encrypt the logical file. If it is not possible (or not desired) to describe the encryption scheme (perhaps for security reasons), us…
1.3.6.1.4.1.9600.1.22.5.1.1.16ColumnospfExtensionread-onlycurrentFile extension (without the dot). Examples: 'txt', 'mof', 'mdb'.
1.3.6.1.4.1.9600.1.22.5.1.1.17ColumnospfFileNameread-onlycurrentName (without extension) of the file. Example: 'autoexec'
1.3.6.1.4.1.9600.1.22.5.1.1.18ColumnospfFileSizeread-onlycurrentSize of the file (in bytes).
1.3.6.1.4.1.9600.1.22.5.1.1.19ColumnospfFileTyperead-onlycurrentFile type (indicated by the Extension property).
1.3.6.1.4.1.9600.1.22.5.1.1.20ColumnospfFreeSpaceread-onlycurrentSpace available in the paging file. The operating system can enlarge the paging file as necessary up to the limit imposed by the user. This property shows the …
1.3.6.1.4.1.9600.1.22.5.1.1.21ColumnospfFSCreationClassNameread-onlycurrentClass of the file system.
1.3.6.1.4.1.9600.1.22.5.1.1.22ColumnospfFSNameread-onlycurrentName of the file system.
1.3.6.1.4.1.9600.1.22.5.1.1.23ColumnospfHiddenread-onlycurrentFile is hidden.
1.3.6.1.4.1.9600.1.22.5.1.1.24ColumnospfInitialSizeread-onlycurrentInitial size of the page file.
1.3.6.1.4.1.9600.1.22.5.1.1.25ColumnospfInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.5.1.1.26ColumnospfInUseCountread-onlycurrentNumber of 'file opens' that are currently active against the file.
1.3.6.1.4.1.9600.1.22.5.1.1.27ColumnospfLastAccessedread-onlycurrentFile was last accessed.
1.3.6.1.4.1.9600.1.22.5.1.1.28ColumnospfLastModifiedread-onlycurrentFile was last modified.
1.3.6.1.4.1.9600.1.22.5.1.1.29ColumnospfManufacturerread-onlycurrentManufacturer name from version resource, if one is present.
1.3.6.1.4.1.9600.1.22.5.1.1.30ColumnospfMaximumSizeread-onlycurrentMaximum size of the page file as set by the user. The operating system will not allow the page file to exceed this limit.
1.3.6.1.4.1.9600.1.22.5.1.1.31ColumnospfNameread-onlycurrentName of the page file. Example: 'C:\PAGEFILE.SYS'
1.3.6.1.4.1.9600.1.22.5.1.1.32ColumnospfPathread-onlycurrentPath of the file. This includes leading and trailing backslashes. Example: '\windows\system\'
1.3.6.1.4.1.9600.1.22.5.1.1.33ColumnospfReadableread-onlycurrentFile can be read.
1.3.6.1.4.1.9600.1.22.5.1.1.34ColumnospfStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.5.1.1.35ColumnospfSystemread-onlycurrentFile is a system file.
1.3.6.1.4.1.9600.1.22.5.1.1.36ColumnospfVersionread-onlycurrentVersion name from version resource, if one is present.
1.3.6.1.4.1.9600.1.22.5.1.1.37ColumnospfWriteableread-onlycurrentFile can be written.
1.3.6.1.4.1.9600.1.22.5.2Tablewin32PageFileSettingTablenot-accessiblecurrentThe Win32_PageFileSetting WMI class represents the settings of a page file. Information contained within objects instantiated from this class specify the page …
1.3.6.1.4.1.9600.1.22.5.2.1Rowwin32PageFileSettingEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.5.2.1.1ColumnospfsIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.5.2.1.2ColumnospfsCaptionread-onlycurrentShort description (one-line string) of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.5.2.1.3ColumnospfsDescriptionread-onlycurrentDescription of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.5.2.1.4ColumnospfsInitialSizeread-onlycurrentInitial size of the page file. Example: 139
1.3.6.1.4.1.9600.1.22.5.2.1.5ColumnospfsMaximumSizeread-onlycurrentMaximum size of the page file. Example: 178
1.3.6.1.4.1.9600.1.22.5.2.1.6ColumnospfsNameread-onlycurrentPath and file name of the page file. Example: 'C:\PAGEFILE.SYS'
1.3.6.1.4.1.9600.1.22.5.2.1.7ColumnospfsSettingIDread-onlycurrentIdentifier by which the CIM_Setting object is known.
1.3.6.1.4.1.9600.1.22.5.3Tablewin32PageFileUsageTablenot-accessiblecurrentThe Win32_PageFileUsage WMI class represents the file used for handling virtual memory file swapping on a Win32 system. Information contained within objects in…
1.3.6.1.4.1.9600.1.22.5.3.1Rowwin32PageFileUsageEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.5.3.1.1ColumnospfuIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.5.3.1.2ColumnospfuAllocatedBaseSizeread-onlycurrentActual amount of disk space allocated for use with this page file. This value corresponds to the range established in Win32_PageFileSetting under the InitialSi…
1.3.6.1.4.1.9600.1.22.5.3.1.3ColumnospfuCaptionread-onlycurrentShort description of the object a one-line string.
1.3.6.1.4.1.9600.1.22.5.3.1.4ColumnospfuCurrentUsageread-onlycurrentAmount of disk space currently used by the page file.
1.3.6.1.4.1.9600.1.22.5.3.1.5ColumnospfuDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.5.3.1.6ColumnospfuInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.5.3.1.7ColumnospfuNameread-onlycurrentName of the page file. Example: 'C:\PAGEFILE.SYS'
1.3.6.1.4.1.9600.1.22.5.3.1.8ColumnospfuPeakUsageread-onlycurrentHighest use page file.
1.3.6.1.4.1.9600.1.22.5.3.1.9ColumnospfuStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.5.3.1.10ColumnospfuTempPageFileread-onlycurrentWindows XP, Windows Server 2003: If true, a temporary page file has been created, usually because there is no permanent page file on the current computer syste…
1.3.6.1.4.1.9600.1.22.6IdentitywmiMultimediacurrentThe class in the Multimedia Audio/Visual subcategory represents properties of the audio or video codec installed on the computer system.
1.3.6.1.4.1.9600.1.22.6.1Tablewin32CodecFileTablenot-accessiblecurrentThe Win32_CodecFile WMI class represents the audio or video codec installed on the computer system. Codecs convert one media format type to another, typically …
1.3.6.1.4.1.9600.1.22.6.1.1Rowwin32CodecFileEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.6.1.1.1ColumnoscfIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.6.1.1.2ColumnoscfAccessMaskread-onlycurrentBitmap list of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported…
1.3.6.1.4.1.9600.1.22.6.1.1.3ColumnoscfArchiveread-onlycurrentFile should be archived. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.4ColumnoscfCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.6.1.1.5ColumnoscfCompressedread-onlycurrentFile is compressed. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.6ColumnoscfCompressionMethodread-onlycurrentAlgorithm or tool used to compress the logical file. If it is not possible (or not desired) to describe the compression scheme (perhaps because it is not known…
1.3.6.1.4.1.9600.1.22.6.1.1.7ColumnoscfCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.6.1.1.8ColumnoscfCreationDateread-onlycurrentFile creation date. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.9ColumnoscfCSCreationClassNameread-onlycurrentClass of the computer system. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.10ColumnoscfCSNameread-onlycurrentString representing the name of the computer system. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.11ColumnoscfDescriptionread-onlycurrentFull name of the codec driver. This string is intended to be displayed in large (descriptive) spaces. This property is inherited from CIM_ManagedSystemElement.…
1.3.6.1.4.1.9600.1.22.6.1.1.12ColumnoscfDriveread-onlycurrentDrive letter (including colon) of the file. This property is inherited from CIM_LogicalFile. Example: 'c:'
1.3.6.1.4.1.9600.1.22.6.1.1.13ColumnoscfEightDotThreeFileNameread-onlycurrentDOS-compatible file name for this file. This property is inherited from CIM_LogicalFile. Example: 'c:\progra~1'
1.3.6.1.4.1.9600.1.22.6.1.1.14ColumnoscfEncryptedread-onlycurrentIf TRUE, the file is encrypted. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.15ColumnoscfEncryptionMethodread-onlycurrentAlgorithm or tool used to encrypt the logical file. If it is not possible (or not desired) to describe the encryption scheme (perhaps for security reasons), us…
1.3.6.1.4.1.9600.1.22.6.1.1.16ColumnoscfExtensionread-onlycurrentFile extension (without the dot). This property is inherited from CIM_LogicalFile. Examples: 'txt', 'mof', 'mdb'
1.3.6.1.4.1.9600.1.22.6.1.1.17ColumnoscfFileNameread-onlycurrentName (without extension) of the file. This property is inherited from CIM_LogicalFile. Example: 'autoexec'
1.3.6.1.4.1.9600.1.22.6.1.1.18ColumnoscfFileSizeread-onlycurrentSize of the file (in bytes). This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.19ColumnoscfFileTyperead-onlycurrentFile type (indicated by the Extension property). This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.20ColumnoscfFSCreationClassNameread-onlycurrentClass of the file system. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.21ColumnoscfFSNameread-onlycurrentName of the file system. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.22ColumnoscfGroupread-onlycurrentCodec represented by this class.
1.3.6.1.4.1.9600.1.22.6.1.1.23ColumnoscfHiddenread-onlycurrentIf TRUE, the file is hidden. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.24ColumnoscfInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.6.1.1.25ColumnoscfInUseCountread-onlycurrentNumber of 'file opens' that are currently active against the file. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.26ColumnoscfLastAccessedread-onlycurrentFile was last accessed. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.27ColumnoscfLastModifiedread-onlycurrentFile was last modified. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.28ColumnoscfManufacturerread-onlycurrentManufacturer string from version resource, if one is present. This property is inherited from CIM_DataFile.
1.3.6.1.4.1.9600.1.22.6.1.1.29ColumnoscfNameread-onlycurrentInherited name that serves as a key of a logical file instance within a file system. Full path names should be provided. This property is inherited from CIM_Ma…
1.3.6.1.4.1.9600.1.22.6.1.1.30ColumnoscfPathread-onlycurrentPath of the file. This includes leading and trailing backslashes. This property is inherited from CIM_LogicalFile. Example: '\windows\system\'
1.3.6.1.4.1.9600.1.22.6.1.1.31ColumnoscfReadableread-onlycurrentFile can be read. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.32ColumnoscfStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.6.1.1.33ColumnoscfSystemread-onlycurrentFile is a system file. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.6.1.1.34ColumnoscfVersionread-onlycurrentVersion string from version resource, if one is present. This property is inherited from CIM_DataFile.
1.3.6.1.4.1.9600.1.22.6.1.1.35ColumnoscfWriteableread-onlycurrentFile can be written. This property is inherited from CIM_LogicalFile.
1.3.6.1.4.1.9600.1.22.7IdentitywmiNetworkingcurrentThe Networking subcategory groups classes that represent network connections, network clients, and network connection settings such as the protocol used.
1.3.6.1.4.1.9600.1.22.7.1Tablewin32IP4PersistedRouteTableTablenot-accessiblecurrentThe Win32_IP4PersistedRouteTable WMI class represents persisted IP routes. By default, the routes added to the routing table are not permanent. Rebooting the c…
1.3.6.1.4.1.9600.1.22.7.1.1Rowwin32IP4PersistedRouteTableEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.7.1.1.1ColumnosprtIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.7.1.1.2ColumnosprtCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.1.1.3ColumnosprtDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.1.1.4ColumnosprtDestinationread-onlycurrentDestination IP address for this persisted route.
1.3.6.1.4.1.9600.1.22.7.1.1.5ColumnosprtInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.1.1.6ColumnosprtMaskread-onlycurrentMask used in this persisted entry. Use the logical AND operation to combine the mask with the destination address. Compare the result to the value in the ipRou…
1.3.6.1.4.1.9600.1.22.7.1.1.7ColumnosprtMetric1read-onlycurrentPrimary routing metric for this persisted route. The semantics of this metric are determined by the routing protocol specified in the route's ipRouteProto valu…
1.3.6.1.4.1.9600.1.22.7.1.1.8ColumnosprtNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElem…
1.3.6.1.4.1.9600.1.22.7.1.1.9ColumnosprtNextHopread-onlycurrentIP address of the next hop of this persisted route. If the route is bound to an interface that is realized via a broadcast medium, this field contains the agen…
1.3.6.1.4.1.9600.1.22.7.1.1.10ColumnosprtStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.7.2Tablewin32IP4RouteTableTablenot-accessiblecurrentThe Win32_IP4RouteTable WMI class represents information that governs the routing of network data packets. For example, Internet packets are usually sent to a …
1.3.6.1.4.1.9600.1.22.7.2.1Rowwin32IP4RouteTableEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.7.2.1.1ColumnosrtIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.7.2.1.2ColumnosrtAgeread-onlycurrentNumber of seconds since this route was last updated or otherwise determined to be correct. Whether the routing information is outdated can only be determined b…
1.3.6.1.4.1.9600.1.22.7.2.1.3ColumnosrtCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.2.1.4ColumnosrtDescriptionread-onlycurrentDescription of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.2.1.5ColumnosrtDestinationread-onlycurrentDestination IP address for this route.
1.3.6.1.4.1.9600.1.22.7.2.1.6ColumnosrtInformationread-onlycurrentReference to MIB definitions specific to the particular routing protocol that is responsible for this route, as determined by the value specified in the route'…
1.3.6.1.4.1.9600.1.22.7.2.1.7ColumnosrtInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.2.1.8ColumnosrtInterfaceIndexread-onlycurrentIP address of the next hop of this route. The value in this property is the same as the value in the InterfaceIndex property in the instances of Win32_NetworkA…
1.3.6.1.4.1.9600.1.22.7.2.1.9ColumnosrtMaskread-onlycurrentMask used in this entry. Masks should be joined with a logical AND with the destination address before being compared to the value in the ipRouteDest field.
1.3.6.1.4.1.9600.1.22.7.2.1.10ColumnosrtMetric1read-onlycurrentPrimary routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property. S…
1.3.6.1.4.1.9600.1.22.7.2.1.11ColumnosrtMetric2read-onlycurrentAlternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property.…
1.3.6.1.4.1.9600.1.22.7.2.1.12ColumnosrtMetric3read-onlycurrentAlternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property.…
1.3.6.1.4.1.9600.1.22.7.2.1.13ColumnosrtMetric4read-onlycurrentAlternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property.…
1.3.6.1.4.1.9600.1.22.7.2.1.14ColumnosrtMetric5read-onlycurrentAlternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property.…
1.3.6.1.4.1.9600.1.22.7.2.1.15ColumnosrtNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElem…
1.3.6.1.4.1.9600.1.22.7.2.1.16ColumnosrtNextHopread-onlycurrentIP address of the next hop of this route. For a route that is bound to an interface realized via a broadcast medium, the value of this field is the agent's IP …
1.3.6.1.4.1.9600.1.22.7.2.1.17ColumnosrtProtocolread-onlycurrentRouting mechanism through which this route was learned. Inclusion of values for gateway routing protocols does not imply that hosts must support those protocol…
1.3.6.1.4.1.9600.1.22.7.2.1.18ColumnosrtStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.7.2.1.19ColumnosrtTyperead-onlycurrentType of route.
1.3.6.1.4.1.9600.1.22.7.3Tablewin32NetworkClientTablenot-accessiblecurrentThe Win32_NetworkClient WMI class represents a network client on a Windows system. Any computer system on the network with a client relationship to the system …
1.3.6.1.4.1.9600.1.22.7.3.1Rowwin32NetworkClientEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.7.3.1.1ColumnosnclIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.7.3.1.2ColumnosnclCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.7.3.1.3ColumnosnclDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.7.3.1.4ColumnosnclInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.7.3.1.5ColumnosnclManufacturerread-onlycurrentName of the manufacturer of the network client running on the Windows system. Example: 'Microsoft Corporation'
1.3.6.1.4.1.9600.1.22.7.3.1.6ColumnosnclNameread-onlycurrentNetwork name of the network client running on a Windows system. Example: 'Microsoft Windows Network'
1.3.6.1.4.1.9600.1.22.7.3.1.7ColumnosnclStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.7.4Tablewin32NetworkConnectionTablenot-accessiblecurrentThe Win32_NetworkClient WMI class represents a network client on a Windows system. Any computer system on the network with a client relationship to the system …
1.3.6.1.4.1.9600.1.22.7.4.1Rowwin32NetworkConnectionEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.7.4.1.1ColumnosncoIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.7.4.1.2ColumnosncoAccessMaskread-onlycurrentList of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under …
1.3.6.1.4.1.9600.1.22.7.4.1.3ColumnosncoCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.7.4.1.4ColumnosncoCommentread-onlycurrentComment supplied by the network provider.
1.3.6.1.4.1.9600.1.22.7.4.1.5ColumnosncoConnectionStateread-onlycurrentCurrent state of the network connection.
1.3.6.1.4.1.9600.1.22.7.4.1.6ColumnosncoConnectionTyperead-onlycurrentPersistence type of the connection used for connecting to the network.
1.3.6.1.4.1.9600.1.22.7.4.1.7ColumnosncoDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.7.4.1.8ColumnosncoDisplayTyperead-onlycurrentNetwork object should be displayed in a network browsing user interface.
1.3.6.1.4.1.9600.1.22.7.4.1.9ColumnosncoInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.7.4.1.10ColumnosncoLocalNameread-onlycurrentLocal name of the connected network device. Example: 'c:\public'
1.3.6.1.4.1.9600.1.22.7.4.1.11ColumnosncoNameread-onlycurrentName of the current network connection. It is the combination of the values in RemoteName and LocalName. Example: '\\NTRELEASE (c:\public)'
1.3.6.1.4.1.9600.1.22.7.4.1.12ColumnosncoPersistentread-onlycurrentConnection will be reconnected automatically by the operating system on the next logon.
1.3.6.1.4.1.9600.1.22.7.4.1.13ColumnosncoProviderNameread-onlycurrentName of the provider that owns the resource. This property can be NULL if the provider name is unknown.
1.3.6.1.4.1.9600.1.22.7.4.1.14ColumnosncoRemoteNameread-onlycurrentRemote network resource name for a network resource. For a current or persistent connection, RemoteName contains the network name associated with the name of t…
1.3.6.1.4.1.9600.1.22.7.4.1.15ColumnosncoRemotePathread-onlycurrentFull path to the network resource. Example: '\\infosrv1\public'
1.3.6.1.4.1.9600.1.22.7.4.1.16ColumnosncoResourceTyperead-onlycurrentType of resource to enumerate or connect to.
1.3.6.1.4.1.9600.1.22.7.4.1.17ColumnosncoStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.7.4.1.18ColumnosncoUserNameread-onlycurrentUser name or the default user name used to establish a network connection. Example: 'SYSTEM'
1.3.6.1.4.1.9600.1.22.7.5Tablewin32NetworkProtocolTablenot-accessiblecurrentThe Win32_NetworkProtocol WMI class represents a protocol and its network characteristics on a Win32 computer system.
1.3.6.1.4.1.9600.1.22.7.5.1Rowwin32NetworkProtocolEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.7.5.1.1ColumnosnpIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.7.5.1.2ColumnosnpCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.7.5.1.3ColumnosnpConnectionlessServiceread-onlycurrentProtocol supports connectionless service. A connectionless (datagram) service describes a communications protocol or transport in which data packets are routed…
1.3.6.1.4.1.9600.1.22.7.5.1.4ColumnosnpDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.7.5.1.5ColumnosnpGuaranteesDeliveryread-onlycurrentProtocol supports guaranteed delivery of data packets. If this flag is FALSE, there is no guarantee that all data sent will reach the intended destination.
1.3.6.1.4.1.9600.1.22.7.5.1.6ColumnosnpGuaranteesSequencingread-onlycurrentProtocol guarantees that data will arrive in the order in which it was sent. Note that this characteristic does not guarantee delivery of the data, only its or…
1.3.6.1.4.1.9600.1.22.7.5.1.7ColumnosnpInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.7.5.1.8ColumnosnpMaximumAddressSizeread-onlycurrentMaximum length of a socket address supported by the protocol. Socket addresses may be items like URLs (www.microsoft.com) or IP addresses (130.215.24.1).
1.3.6.1.4.1.9600.1.22.7.5.1.9ColumnosnpMaximumMessageSizeread-onlycurrentMaximum message size supported by the protocol. This is the maximum size of a message that can be sent from or received by the host. For protocols that do not …
1.3.6.1.4.1.9600.1.22.7.5.1.10ColumnosnpMessageOrientedread-onlycurrentProtocol is message-oriented. A message-oriented protocol uses packets of data to transfer information. Conversely, stream-oriented protocols transfer data as …
1.3.6.1.4.1.9600.1.22.7.5.1.11ColumnosnpMinimumAddressSizeread-onlycurrentMinimum length of a socket address supported by the protocol.
1.3.6.1.4.1.9600.1.22.7.5.1.12ColumnosnpNameread-onlycurrentName for the protocol. Example: 'TCP/IP'
1.3.6.1.4.1.9600.1.22.7.5.1.13ColumnosnpPseudoStreamOrientedread-onlycurrentProtocol is a message-oriented protocol that can receive variable-length data packets or streamed data for all receive operations. This optional capability is …
1.3.6.1.4.1.9600.1.22.7.5.1.14ColumnosnpStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.7.5.1.15ColumnosnpSupportsBroadcastingread-onlycurrentProtocol supports a mechanism for broadcasting messages across the network.
1.3.6.1.4.1.9600.1.22.7.5.1.16ColumnosnpSupportsConnectDataread-onlycurrentProtocol allows data to be connected across the network.
1.3.6.1.4.1.9600.1.22.7.5.1.17ColumnosnpSupportsDisconnectDataread-onlycurrentProtocol allows data to be disconnected across the network.
1.3.6.1.4.1.9600.1.22.7.5.1.18ColumnosnpSupportsEncryptionread-onlycurrentProtocol supports data encryption.
1.3.6.1.4.1.9600.1.22.7.5.1.19ColumnosnpSupportsExpeditedDataread-onlycurrentProtocol supports expedited data (also known as urgent data) across the network. Expedited data can bypass flow control and receive priority over normal data p…
1.3.6.1.4.1.9600.1.22.7.5.1.20ColumnosnpSupportsFragmentationread-onlycurrentProtocol supports transmitting the data in fragments. Physical network maximum transfer unit (MTU) is hidden from applications. Each media type has a maximum f…
1.3.6.1.4.1.9600.1.22.7.5.1.21ColumnosnpSupportsGracefulClosingread-onlycurrentProtocol supports two-phase close operations, also known as graceful close operations. If not, the protocol supports only abortive close operations.
1.3.6.1.4.1.9600.1.22.7.5.1.22ColumnosnpSupportsGuaranteedBandwidthread-onlycurrentProtocol has a mechanism to establish and maintain a guaranteed bandwidth.
1.3.6.1.4.1.9600.1.22.7.5.1.23ColumnosnpSupportsMulticastingread-onlycurrentProtocol supports multicasting.
1.3.6.1.4.1.9600.1.22.7.5.1.24ColumnosnpSupportsQualityofServiceread-onlycurrentProtocol is capable of Quality of Service (QOS) support by the underlying layered service provider or transport carrier. QOS is a collection of components that…
1.3.6.1.4.1.9600.1.22.7.6Tablewin32NTDomainTablenot-accessiblecurrentThe Win32_NTDomain WMI class represents a Windows NT domain. This class is new for Windows XP.
1.3.6.1.4.1.9600.1.22.7.6.1Rowwin32NTDomainEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.7.6.1.1ColumnosdoIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.7.6.1.2ColumnosdoCaptionread-onlycurrentShort description of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.6.1.3ColumnosdoClientSiteNameread-onlycurrentName of the site where the domain controller is configured. This value can be NULL.
1.3.6.1.4.1.9600.1.22.7.6.1.4ColumnosdoCreationClassNameread-onlycurrentName of the first concrete class in the inheritance chain that is used to create an instance. You can use this property with other properties of the class to i…
1.3.6.1.4.1.9600.1.22.7.6.1.5ColumnosdoDcSiteNameread-onlycurrentName of the site where the domain controller is located. This value can be NULL.
1.3.6.1.4.1.9600.1.22.7.6.1.6ColumnosdoDescriptionread-onlycurrentComment that describes the link. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.6.1.7ColumnosdoDNSForestNameread-onlycurrentName of the root of the DNS tree.
1.3.6.1.4.1.9600.1.22.7.6.1.8ColumnosdoDomainControllerAddressread-onlycurrentAddress of the discovered domain controller.
1.3.6.1.4.1.9600.1.22.7.6.1.9ColumnosdoDomainControllerAddressTyperead-onlycurrentType of address specified in the DomainControllerAddress property.
1.3.6.1.4.1.9600.1.22.7.6.1.10ColumnosdoDomainControllerNameread-onlycurrentComputer name for the discovered domain controller.
1.3.6.1.4.1.9600.1.22.7.6.1.11ColumnosdoDomainGUIDread-onlycurrentGlobally unique identifier (GUID) of the domain controller. This property is 0 (zero) if the domain controller does not have a GUID.
1.3.6.1.4.1.9600.1.22.7.6.1.12ColumnosdoDomainNameread-onlycurrentName of the domain. Example: microsoft.com
1.3.6.1.4.1.9600.1.22.7.6.1.13ColumnosdoDSDirectoryServiceFlagread-onlycurrentIf TRUE, the domain controller is a directory service server.
1.3.6.1.4.1.9600.1.22.7.6.1.14ColumnosdoDSDnsControllerFlagread-onlycurrentIf true the Domain Controller Name is in DNS format. Example: www.mynode.com or 135.5.33.19
1.3.6.1.4.1.9600.1.22.7.6.1.15ColumnosdoDSDnsDomainFlagread-onlycurrentIf TRUE, the DomainName value is in DNS format.
1.3.6.1.4.1.9600.1.22.7.6.1.16ColumnosdoDSDnsForestFlagread-onlycurrentIf TRUE, the DNSForestName value is in DNS format.
1.3.6.1.4.1.9600.1.22.7.6.1.17ColumnosdoDSGlobalCatalogFlagread-onlycurrentIf TRUE, the domain controller is a Global Catalog server for the DNSForestName value.
1.3.6.1.4.1.9600.1.22.7.6.1.18ColumnosdoDSKerberosDistCenterFlagread-onlycurrentIf TRUE, the domain controller is a Kerberos Key Distribution Center for the domain.
1.3.6.1.4.1.9600.1.22.7.6.1.19ColumnosdoDSPriDomainControllerFlagread-onlycurrentIf TRUE, the domain controller is the Primary Domain Controller.
1.3.6.1.4.1.9600.1.22.7.6.1.20ColumnosdoDSTimeServiceFlagread-onlycurrentIf TRUE, the domain is running the Windows Time service.
1.3.6.1.4.1.9600.1.22.7.6.1.21ColumnosdoDSWritableFlagread-onlycurrentIf TRUE, the domain controller hosts a writeable DS or Security Accounts Manager (SAM).
1.3.6.1.4.1.9600.1.22.7.6.1.22ColumnosdoInstallDateread-onlycurrentDate and time when an object is installed. An object does not need a value to indicate that it is installed. This property is inherited from CIM_ManagedSystemE…
1.3.6.1.4.1.9600.1.22.7.6.1.23ColumnosdoNameread-onlycurrentName of an object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.7.6.1.24ColumnosdoNameFormatread-onlycurrentFormat to generate the system name using the subclass heuristic. This property is inherited from CIM_System.
1.3.6.1.4.1.9600.1.22.7.6.1.25ColumnosdoPrimaryOwnerContactread-onlycurrentContact information for the primary system owner. This property is inherited from CIM_System.
1.3.6.1.4.1.9600.1.22.7.6.1.26ColumnosdoPrimaryOwnerNameread-onlycurrentName of the primary system owner. This property is inherited from CIM_System.
1.3.6.1.4.1.9600.1.22.7.6.1.27ColumnosdoRolesread-onlycurrentRoles for this system in the IT environment. This property is inherited from CIM_System. Example: 'Switch' or 'Bridge'
1.3.6.1.4.1.9600.1.22.7.6.1.28ColumnosdoStatusread-onlycurrentCurrent status of an object. Various operational and non-operational statuses can be defined. Operational statuses include: OK, Degraded, and Pred Fail, which …
1.3.6.1.4.1.9600.1.22.8IdentitywmiOperatingSystemSettingscurrentThe Operating System Settings subcategory groups classes that represent the Operating System and its settings.
1.3.6.1.4.1.9600.1.22.8.1Tablewin32BootConfigurationTablenot-accessiblecurrentThe Win32_BootConfiguration WMI class represents the boot configuration of a Windows system.
1.3.6.1.4.1.9600.1.22.8.1.1Rowwin32BootConfigurationEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.1.1.1ColumnosbcIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.1.1.2ColumnosbcBootDirectoryread-onlycurrentPath to the system files required for booting the system. Example: 'C:\Windows'
1.3.6.1.4.1.9600.1.22.8.1.1.3ColumnosbcCaptionread-onlycurrentShort description (one-line string) of the CIM_Setting object. This property is inherited from CIM_Setting.
1.3.6.1.4.1.9600.1.22.8.1.1.4ColumnosbcConfigurationPathread-onlycurrentPath to the configuration files. This value may be similar to the value in the BootDirectory property.
1.3.6.1.4.1.9600.1.22.8.1.1.5ColumnosbcDescriptionread-onlycurrentDescription of the CIM_Setting object. This property is inherited from CIM_Setting.
1.3.6.1.4.1.9600.1.22.8.1.1.6ColumnosbcLastDriveread-onlycurrentLast drive letter to which a physical drive is assigned. Example: 'E:'
1.3.6.1.4.1.9600.1.22.8.1.1.7ColumnosbcNameread-onlycurrentName of the boot configuration. It is an identifier for the boot configuration.
1.3.6.1.4.1.9600.1.22.8.1.1.8ColumnosbcScratchDirectoryread-onlycurrentDirectory where temporary files can reside during boot time.
1.3.6.1.4.1.9600.1.22.8.1.1.9ColumnosbcSettingIDread-onlycurrentIdentifier by which the CIM_Setting object is known. This property is inherited from CIM_Setting.
1.3.6.1.4.1.9600.1.22.8.1.1.10ColumnosbcTempDirectoryread-onlycurrentDirectory where temporary files are stored. Example: 'C:\TEMP'
1.3.6.1.4.1.9600.1.22.8.2Tablewin32ComputerSystemTablenot-accessiblecurrentThe Win32_ComputerSystem WMI class represents a computer operating system in a Windows environment.
1.3.6.1.4.1.9600.1.22.8.2.1Rowwin32ComputerSystemEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.2.1.1ColumnoscsIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.2.1.2ColumnoscsAdminPasswordStatusread-onlycurrentSystem hardware security settings for administrator password status.
1.3.6.1.4.1.9600.1.22.8.2.1.3ColumnoscsAutomaticResetBootOptionread-onlycurrentAutomatic reset boot option is enabled.
1.3.6.1.4.1.9600.1.22.8.2.1.4ColumnoscsAutomaticResetCapabilityread-onlycurrentAutomatic reset is enabled. This capability is available on Windows XP, Windows 2000, and Windows NT, but not on Windows 98 or Windows 95.
1.3.6.1.4.1.9600.1.22.8.2.1.5ColumnoscsBootOptionOnLimitread-onlycurrentBoot option limit is ON. Identifies the system action when the ResetLimit value is reached.
1.3.6.1.4.1.9600.1.22.8.2.1.6ColumnoscsBootOptionOnWatchDogread-onlycurrentType of reboot action after the time on the watchdog timer is elapsed.
1.3.6.1.4.1.9600.1.22.8.2.1.7ColumnoscsBootROMSupportedread-onlycurrentIndicates whether or not a boot ROM is supported.
1.3.6.1.4.1.9600.1.22.8.2.1.8ColumnoscsBootupStateread-onlycurrentSystem is started. Fail-safe boot bypasses the user startup files also called SafeBoot.
1.3.6.1.4.1.9600.1.22.8.2.1.9ColumnoscsCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.8.2.1.10ColumnoscsChassisBootupStateread-onlycurrentBootup state of the chassis.
1.3.6.1.4.1.9600.1.22.8.2.1.11ColumnoscsCreationClassNameread-onlycurrentName of the first concrete class in the inheritance chain of an instance. You can use this property with other properties of the class to identify all instance…
1.3.6.1.4.1.9600.1.22.8.2.1.12ColumnoscsCurrentTimeZoneread-onlycurrentAmount of time the unitary computer system is offset from Universal Time Coordinate (UTC).
1.3.6.1.4.1.9600.1.22.8.2.1.13ColumnoscsDaylightInEffectread-onlycurrentDaylight savings mode is ON.
1.3.6.1.4.1.9600.1.22.8.2.1.14ColumnoscsDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.8.2.1.15ColumnoscsDNSHostNameread-onlycurrentName of local computer according to the domain name server (DNS). This property is new for Windows Server 2003.
1.3.6.1.4.1.9600.1.22.8.2.1.16ColumnoscsDomainread-onlycurrentName of the domain to which a computer belongs. Note If the computer is not part of a domain, then the name of the workgroup will be returned.
1.3.6.1.4.1.9600.1.22.8.2.1.17ColumnoscsDomainRoleread-onlycurrentRole of a computer in an assigned domain workgroup. A domain workgroup is a collection of computers on the same network. For example, a DomainRole property may…
1.3.6.1.4.1.9600.1.22.8.2.1.18ColumnoscsEnableDaylightSavingsTimeread-onlycurrentWindows XP, Windows Server 2003: Enables daylight savings time (DST) on a machine. A value of true indicates that the system time changes to an hour ahead or b…
1.3.6.1.4.1.9600.1.22.8.2.1.19ColumnoscsFrontPanelResetStatusread-onlycurrentThe following table identifies the hardware security settings for the reset button on a computer.
1.3.6.1.4.1.9600.1.22.8.2.1.20ColumnoscsInfraredSupportedread-onlycurrentInfrared (IR) port exists on a computer system.
1.3.6.1.4.1.9600.1.22.8.2.1.21ColumnoscsInitialLoadInforead-onlycurrentData needed to find the initial load device or boot service to request the operating system start up. This property is inherited from CIM_UnitaryComputerSystem.
1.3.6.1.4.1.9600.1.22.8.2.1.22ColumnoscsInstallDateread-onlycurrentObject is installed. An object does not need a value to indicate that it is installed. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.8.2.1.23ColumnoscsKeyboardPasswordStatusread-onlycurrentSystem hardware security settings for Keyboard Password Status.
1.3.6.1.4.1.9600.1.22.8.2.1.24ColumnoscsLastLoadInforead-onlycurrentArray entry of the InitialLoadInfo property that contains the data to boot the operating system that is loaded. This property is inherited from CIM_UnitaryComp…
1.3.6.1.4.1.9600.1.22.8.2.1.25ColumnoscsManufacturerread-onlycurrentName of a computer manufacturer. Example: Adventure Works
1.3.6.1.4.1.9600.1.22.8.2.1.26ColumnoscsModelread-onlycurrentProduct name that a manufacturer gives to a computer. This property must have a value.
1.3.6.1.4.1.9600.1.22.8.2.1.27ColumnoscsNameread-onlycurrentKey of a CIM_System instance in an enterprise environment. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.8.2.1.28ColumnoscsNameFormatread-onlycurrentComputer system Name value that is generated automatically. The CIM_ComputerSystem object and its derivatives are top level objects of the Common Information M…
1.3.6.1.4.1.9600.1.22.8.2.1.29ColumnoscsNetworkServerModeEnabledread-onlycurrentNetwork Server Mode is enabled.
1.3.6.1.4.1.9600.1.22.8.2.1.30ColumnoscsNumberOfProcessorsread-onlycurrentNumber of physical processors currently available on a system. This is the number of enabled processors for a system, which does not include the disabled proce…
1.3.6.1.4.1.9600.1.22.8.2.1.31ColumnoscsOEMLogoBitmapread-onlycurrentList of data for a bitmap that the original equipment manufacturer (OEM) creates.
1.3.6.1.4.1.9600.1.22.8.2.1.32ColumnoscsOEMStringArrayread-onlycurrentList of free form strings that an OEM defines. For example, an OEM defines the part numbers for system reference documents, manufacturer contact information, a…
1.3.6.1.4.1.9600.1.22.8.2.1.33ColumnoscsPartOfDomainread-onlycurrentWindows XP, Windows Server 2003: If true, the computer is part of a domain or workgroup. If the value is NULL, the computer is not a part of a domain or workgr…
1.3.6.1.4.1.9600.1.22.8.2.1.34ColumnoscsPauseAfterResetread-onlycurrentTime delay before a reboot is initiated in milliseconds. It is used after a system power cycle, local or remote system reset, and automatic system reset. A val…
1.3.6.1.4.1.9600.1.22.8.2.1.35ColumnoscsPowerManagementCapabilitiesread-onlycurrentSpecific power capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled, but the exact setting is…
1.3.6.1.4.1.9600.1.22.8.2.1.36ColumnoscsPowerManagementSupportedread-onlycurrentDevice can be power-managed, for example, a device can be put into suspend mode, and so on. This property does not indicate that power management features are …
1.3.6.1.4.1.9600.1.22.8.2.1.37ColumnoscsPowerOnPasswordStatusread-onlycurrentSystem hardware security settings for Power On Password Status.
1.3.6.1.4.1.9600.1.22.8.2.1.38ColumnoscsPowerStateread-onlycurrentCurrent power state of a computer and its associated operating system. The power saving states have the following values: Value 4 (Unknown) indicates that the …
1.3.6.1.4.1.9600.1.22.8.2.1.39ColumnoscsPowerSupplyStateread-onlycurrentState of the power supply or supplies when last booted.
1.3.6.1.4.1.9600.1.22.8.2.1.40ColumnoscsPrimaryOwnerContactread-onlycurrentContact information for the primary system owner, for example, phone number, e-mail address, and so on. This property is inherited from CIM_System.
1.3.6.1.4.1.9600.1.22.8.2.1.41ColumnoscsPrimaryOwnerNameread-onlycurrentName of the primary system owner. This property is inherited from CIM_System.
1.3.6.1.4.1.9600.1.22.8.2.1.42ColumnoscsResetCapabilityread-onlycurrentIf enabled, the value is 4 and the unitary computer system can be reset using the power and reset buttons. If disabled the value is 3, and a reset is not allow…
1.3.6.1.4.1.9600.1.22.8.2.1.43ColumnoscsResetCountread-onlycurrentNumber of automatic resets since the last reset. A value of -1 (minus one) indicates that the count is unknown.
1.3.6.1.4.1.9600.1.22.8.2.1.44ColumnoscsResetLimitread-onlycurrentNumber of consecutive times a system reset is attempted. A value of -1 (minus one) indicates that the limit is unknown.
1.3.6.1.4.1.9600.1.22.8.2.1.45ColumnoscsRolesread-onlycurrentList that specifies the roles of a system in the information technology environment. This property is inherited from CIM_System.
1.3.6.1.4.1.9600.1.22.8.2.1.46ColumnoscsStatusread-onlycurrentCurrent status of an object. Various operational and non-operational statuses can be defined. Operational statuses include: OK, Degraded, and Pred Fail, which …
1.3.6.1.4.1.9600.1.22.8.2.1.47ColumnoscsSupportContactDescriptionread-onlycurrentList of the support contact information for the Windows operating system.
1.3.6.1.4.1.9600.1.22.8.2.1.48ColumnoscsSystemStartupDelayread-onlycurrentTime to delay before starting the Windows operating system in seconds.
1.3.6.1.4.1.9600.1.22.8.2.1.49ColumnoscsSystemStartupOptionsread-onlycurrentList of the options for starting up the Windows operating system. This property must have a value.
1.3.6.1.4.1.9600.1.22.8.2.1.50ColumnoscsSystemStartupSettingread-onlycurrentIndex of the default start up profile. This value is calculated so that it usually returns 0 (zero), because at write-time the profile string is physically mov…
1.3.6.1.4.1.9600.1.22.8.2.1.51ColumnoscsSystemTyperead-onlycurrentSystem running on the Windows computer. This property must have a value.
1.3.6.1.4.1.9600.1.22.8.2.1.52ColumnoscsThermalStateread-onlycurrentThermal state of the system when last booted.
1.3.6.1.4.1.9600.1.22.8.2.1.53ColumnoscsTotalPhysicalMemoryread-onlycurrentTotal size of physical memory. Example: 67108864
1.3.6.1.4.1.9600.1.22.8.2.1.54ColumnoscsUserNameread-onlycurrentName of a user that is logged on currently. This property must have a value. In a terminal services session, UserName returns the name of the user that is logg…
1.3.6.1.4.1.9600.1.22.8.2.1.55ColumnoscsWakeUpTyperead-onlycurrentEvent that causes the system to power up.
1.3.6.1.4.1.9600.1.22.8.2.1.56ColumnoscsWorkgroupread-onlycurrentWindows Server 2003 and Windows XP: Name of the workgroup for this computer. If the value of the PartOfDomain property is false, then the name of the workgroup…
1.3.6.1.4.1.9600.1.22.8.2.1.57ColumnoscsAutomaticManagedPagefileread-onlycurrentIf True, the system manages the page file.
1.3.6.1.4.1.9600.1.22.8.2.1.58ColumnoscsNumberOfLogicalProcessorsread-onlycurrentNumber of logical processors available on the computer. You can use NumberOfLogicalProcessors and NumberOfProcessors to determine if the computer is hyperthrea…
1.3.6.1.4.1.9600.1.22.8.2.1.59ColumnoscsPCSystemTyperead-onlycurrentType of the computer in use, such as laptop, desktop, or Tablet.
1.3.6.1.4.1.9600.1.22.8.3Tablewin32ComputerSystemProductTablenot-accessiblecurrentThe Win32_ComputerSystemProduct WMI class represents a product. This includes software and hardware used on this computer system.
1.3.6.1.4.1.9600.1.22.8.3.1Rowwin32ComputerSystemProductEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.3.1.1ColumnoscspIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.3.1.2ColumnoscspCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_Product.
1.3.6.1.4.1.9600.1.22.8.3.1.3ColumnoscspDescriptionread-onlycurrentDescription of the product. This property is inherited from CIM_Product.
1.3.6.1.4.1.9600.1.22.8.3.1.4ColumnoscspIdentifyingNumberread-onlycurrentProduct identification such as a serial number on software or a die number on a hardware chip. This property is inherited from CIM_Product.
1.3.6.1.4.1.9600.1.22.8.3.1.5ColumnoscspNameread-onlycurrentCommonly used product name. This property is inherited from CIM_Product.
1.3.6.1.4.1.9600.1.22.8.3.1.6ColumnoscspSKUNumberread-onlycurrentProduct SKU (stock-keeping unit) information. This property is inherited from CIM_Product.
1.3.6.1.4.1.9600.1.22.8.3.1.7ColumnoscspUUIDread-onlycurrentUniversally unique identifier (UUID) for this product. A UUID is a 128-bit identifier that is guaranteed to be different from other generated UUIDs. If a UUID …
1.3.6.1.4.1.9600.1.22.8.3.1.8ColumnoscspVendorread-onlycurrentName of the product supplier. Corresponds to the Vendor property in the product object in the Desktop Management Task Force (DMTF) Solution Exchange Standard. …
1.3.6.1.4.1.9600.1.22.8.3.1.9ColumnoscspVersionread-onlycurrentProduct version information. Corresponds to the Version property in the product object in the DMTF Solution Exchange Standard. This property is inherited from …
1.3.6.1.4.1.9600.1.22.8.4Tablewin32LoadOrderGroupTablenot-accessiblecurrentThe Win32_LoadOrderGroup WMI class represents a group of system services that define execution dependencies. The services must be initiated in the order specif…
1.3.6.1.4.1.9600.1.22.8.4.1Rowwin32LoadOrderGroupEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.4.1.1ColumnoslogIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.4.1.2ColumnoslogCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.8.4.1.3ColumnoslogDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.8.4.1.4ColumnoslogDriverEnabledread-onlycurrentIndicates whether this load order group can include drivers along with system services.
1.3.6.1.4.1.9600.1.22.8.4.1.5ColumnoslogGroupOrderread-onlycurrentSequence in which this group of services is loaded onto the operating system. Example: 2
1.3.6.1.4.1.9600.1.22.8.4.1.6ColumnoslogInstallDateread-onlycurrentDate object was installed. This property does not require a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.8.4.1.7ColumnoslogNameread-onlycurrentName of the load order group. Example: 'Primary disk'
1.3.6.1.4.1.9600.1.22.8.4.1.8ColumnoslogStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.8.5Tablewin32OperatingSystemTablenot-accessiblecurrentThe Win32_OperatingSystem WMI class represents an operating system installed on a Windows computer system. Any operating system that can be installed on a Wind…
1.3.6.1.4.1.9600.1.22.8.5.1Rowwin32OperatingSystemEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.5.1.1ColumnososIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.5.1.2ColumnososBootDeviceread-onlycurrentName of the disk drive from which the Windows operating system boots. Example: '\\Device\Harddisk0'
1.3.6.1.4.1.9600.1.22.8.5.1.3ColumnososBuildNumberread-onlycurrentBuild number of an operating system. It can be used for more precise version information than product release version numbers. Example: '1381'
1.3.6.1.4.1.9600.1.22.8.5.1.4ColumnososBuildTyperead-onlycurrentType of build used for an operating system. Examples: 'retail build', 'checked build'
1.3.6.1.4.1.9600.1.22.8.5.1.5ColumnososCaptionread-onlycurrentShort description of the object a one-line string. The string includes the operating system version. For example, 'Microsoft Windows XP Professional Version = …
1.3.6.1.4.1.9600.1.22.8.5.1.6ColumnososCodeSetread-onlycurrentCode page value an operating system uses. A code page contains a character table that an operating system uses to translate strings for different languages. Th…
1.3.6.1.4.1.9600.1.22.8.5.1.7ColumnososCountryCoderead-onlycurrentCode for the country/region that an operating system uses. Values are based on international phone dialing prefixes also referred to as IBM country/region code…
1.3.6.1.4.1.9600.1.22.8.5.1.8ColumnososCreationClassNameread-onlycurrentName of the first concrete class that appears in the inheritance chain used in the creation of an instance. When used with other key properties of the class, t…
1.3.6.1.4.1.9600.1.22.8.5.1.9ColumnososCSCreationClassNameread-onlycurrentCreation class name of the scoping computer system.
1.3.6.1.4.1.9600.1.22.8.5.1.10ColumnososCSDVersionread-onlycurrentNull-terminated string that indicates the latest service pack installed on a computer system. If no service pack is installed, the string is NULL. For computer…
1.3.6.1.4.1.9600.1.22.8.5.1.11ColumnososCSNameread-onlycurrentName of the scoping computer system.
1.3.6.1.4.1.9600.1.22.8.5.1.12ColumnososCurrentTimeZoneread-onlycurrentNumber of minutes an operating system is offset from Greenwich mean time (GMT). The number is positive, negative, or zero.
1.3.6.1.4.1.9600.1.22.8.5.1.13ColumnososDataExecPrevention32BitApplread-onlycurrentWhen the data execution prevention hardware feature is available, then if TRUE, this property indicates that the feature is set to work for 32-bit applications…
1.3.6.1.4.1.9600.1.22.8.5.1.14ColumnososDataExecPreventionAvailableread-onlycurrentData execution prevention is an AMD 64-bit hardware feature to prevent buffer overrun attacks by stopping the execution of code on data type memory pages. If T…
1.3.6.1.4.1.9600.1.22.8.5.1.15ColumnososDataExecPreventionDriversread-onlycurrentWhen the data execution prevention hardware feature is available, then if TRUE, this property indicates that the feature is set to work for drivers. On 64-bit …
1.3.6.1.4.1.9600.1.22.8.5.1.16ColumnososDebugread-onlycurrentOperating system is a checked (debug) build. If TRUE, the debugging version of User.exe is installed. Checked builds provide error checking, argument verificat…
1.3.6.1.4.1.9600.1.22.8.5.1.17ColumnososDescriptionread-onlycurrentDescription of the Windows operating system. Some user interfaces (those that allow editing of this description) limit its length to 48 characters.
1.3.6.1.4.1.9600.1.22.8.5.1.18ColumnososDistributedread-onlycurrentOperating system is distributed across several computer system nodes. If so, these nodes should be grouped as a cluster.
1.3.6.1.4.1.9600.1.22.8.5.1.19ColumnososEncryptionLevelread-onlycurrentWindows Server 2003, Windows XP: Encryption level for secure transactions 40-bit, 128-bit, or n-bit.
1.3.6.1.4.1.9600.1.22.8.5.1.20ColumnososForegroundApplicationBoostread-onlycurrentIncrease in priority given to the foreground application. On computer systems running Windows NT 4.0 and Windows 2000, application boost is implemented by givi…
1.3.6.1.4.1.9600.1.22.8.5.1.21ColumnososFreePhysicalMemoryread-onlycurrentNumber of kilobytes of physical memory currently unused and available.
1.3.6.1.4.1.9600.1.22.8.5.1.22ColumnososFreeSpaceInPagingFilesread-onlycurrentNumber of kilobytes that can be mapped into the operating system paging files without causing any other pages to be swapped out.
1.3.6.1.4.1.9600.1.22.8.5.1.23ColumnososFreeVirtualMemoryread-onlycurrentNumber of kilobytes of virtual memory currently unused and available. For example, this may be calculated by adding the amount of free RAM to the amount of fre…
1.3.6.1.4.1.9600.1.22.8.5.1.24ColumnososInstallDateread-onlycurrentDate object was installed. This property does not require a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.8.5.1.25ColumnososLargeSystemCacheread-onlycurrentIndicates whether or not to optimize memory for applications or system performance. Windows 2000 and earlier: This property is not available.
1.3.6.1.4.1.9600.1.22.8.5.1.26ColumnososLastBootUpTimeread-onlycurrentOperating system was last booted.
1.3.6.1.4.1.9600.1.22.8.5.1.27ColumnososLocalDateTimeread-onlycurrentOperating system's version of the local date and time of day.
1.3.6.1.4.1.9600.1.22.8.5.1.28ColumnososLocaleread-onlycurrentLanguage identifier used by the operating system. A language identifier is a standard international numeric abbreviation for a country/region. Each language ha…
1.3.6.1.4.1.9600.1.22.8.5.1.29ColumnososManufacturerread-onlycurrentName of the operating system manufacturer. For Windows systems, this value is 'Microsoft Corporation'.
1.3.6.1.4.1.9600.1.22.8.5.1.30ColumnososMaxNumberOfProcessesread-onlycurrentMaximum number of process contexts the operating system can support. If there is no fixed maximum, the value should be 0 (zero). On systems that have a fixed m…
1.3.6.1.4.1.9600.1.22.8.5.1.31ColumnososMaxProcessMemorySizeread-onlycurrentMaximum number of kilobytes of memory that can be allocated to a process. For operating systems with no virtual memory, typically this value is equal to the to…
1.3.6.1.4.1.9600.1.22.8.5.1.32ColumnososNameread-onlycurrentOperating system instance within a computer system.
1.3.6.1.4.1.9600.1.22.8.5.1.33ColumnososNumberOfLicensedUsersread-onlycurrentNumber of user licenses for the operating system. If unlimited, enter 0 (zero). If unknown, enter -1.
1.3.6.1.4.1.9600.1.22.8.5.1.34ColumnososNumberOfProcessesread-onlycurrentNumber of process contexts currently loaded or running on the operating system.
1.3.6.1.4.1.9600.1.22.8.5.1.35ColumnososNumberOfUsersread-onlycurrentNumber of user sessions for which the operating system is storing state information currently.
1.3.6.1.4.1.9600.1.22.8.5.1.36ColumnososOrganizationread-onlycurrentCompany name for the registered user of the operating system. Example: 'Microsoft Corporation'
1.3.6.1.4.1.9600.1.22.8.5.1.37ColumnososOSLanguageread-onlycurrentLanguage version of the operating system installed.
1.3.6.1.4.1.9600.1.22.8.5.1.38ColumnososOSProductSuiteread-onlycurrentInstalled and licensed system product additions to the operating system. For example, the value of 146 (0x92) for OSProductSuite indicates Enterprise, Terminal…
1.3.6.1.4.1.9600.1.22.8.5.1.39ColumnososOSTyperead-onlycurrentType of operating system.
1.3.6.1.4.1.9600.1.22.8.5.1.40ColumnososOtherTypeDescriptionread-onlycurrentManufacturer and operating system type that is used when the operating system property OSType is set to 1 (Other). The format of the string inserted in OtherTy…
1.3.6.1.4.1.9600.1.22.8.5.1.41ColumnososPAEEnabledread-onlycurrentPhysical Address Extension (PAE) is enabled by the operating system running on Intel processors. PAE allows applications to address more than 4 GB of physical …
1.3.6.1.4.1.9600.1.22.8.5.1.42ColumnososPlusProductIDread-onlycurrentIdentification number for the Windows Plus! operating system enhancement software if installed.
1.3.6.1.4.1.9600.1.22.8.5.1.43ColumnososPlusVersionNumberread-onlycurrentVersion number of the Windows Plus! operating system enhancement software if installed.
1.3.6.1.4.1.9600.1.22.8.5.1.44ColumnososPrimaryread-onlycurrentPrimary operating system.
1.3.6.1.4.1.9600.1.22.8.5.1.45ColumnososProductTyperead-onlycurrentAdditional information about the system.
1.3.6.1.4.1.9600.1.22.8.5.1.46ColumnososQuantumLengthread-onlycurrentNumber of clock ticks per quantum. A quantum is a unit of execution time that the scheduler is allowed to give to an application before switching to other appl…
1.3.6.1.4.1.9600.1.22.8.5.1.47ColumnososQuantumTyperead-onlycurrentLength type of quantums. Windows NT 4.0 Workstation/Windows 2000 defaults to variable-length quantums where the foreground application has a longer quantum tha…
1.3.6.1.4.1.9600.1.22.8.5.1.48ColumnososRegisteredUserread-onlycurrentName of the registered user of the operating system. Example: 'Ben Smith'
1.3.6.1.4.1.9600.1.22.8.5.1.49ColumnososSerialNumberread-onlycurrentOperating system product serial identification number. Example: '10497-OEM-0031416-71674'
1.3.6.1.4.1.9600.1.22.8.5.1.50ColumnososServicePackMajorVersionread-onlycurrentMajor version number of the service pack installed on the computer system. If no service pack has been installed, the value is 0 (zero). Windows NT 4.0, Window…
1.3.6.1.4.1.9600.1.22.8.5.1.51ColumnososServicePackMinorVersionread-onlycurrentMinor version number of the service pack installed on the computer system. If no service pack has been installed, the value is 0 (zero). Windows NT 4.0, Window…
1.3.6.1.4.1.9600.1.22.8.5.1.52ColumnososSizeStoredInPagingFilesread-onlycurrentTotal number of kilobytes that can be stored in the operating system's paging files 0 (zero) indicates that there are no paging files. Note that this number do…
1.3.6.1.4.1.9600.1.22.8.5.1.53ColumnososStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.8.5.1.54ColumnososSuiteMaskread-onlycurrentBit flags that identify the product suites available on the system. Windows 2000 Server and earlier, Windows 2000 and earlier: This property is not available. …
1.3.6.1.4.1.9600.1.22.8.5.1.55ColumnososSystemDeviceread-onlycurrentPhysical disk partition on which the operating system is installed.
1.3.6.1.4.1.9600.1.22.8.5.1.56ColumnososSystemDirectoryread-onlycurrentSystem directory of the operating system. Example: 'C:\WINDOWS\SYSTEM32'
1.3.6.1.4.1.9600.1.22.8.5.1.57ColumnososSystemDriveread-onlycurrentLetter of the disk drive on which the operating system resides. Example: 'C:' Windows 2000 Server and earlier, Windows 2000 and earlier: This property is not a…
1.3.6.1.4.1.9600.1.22.8.5.1.58ColumnososTotalSwapSpaceSizeread-onlycurrentTotal swap space in kilobytes. This value may be NULL (unspecified) if swap space is not distinguished from page files. However, some operating systems disting…
1.3.6.1.4.1.9600.1.22.8.5.1.59ColumnososTotalVirtualMemorySizeread-onlycurrentNumber of kilobytes of virtual memory. For example, this may be calculated by adding the amount of total RAM to the amount of paging space, that is, adding the…
1.3.6.1.4.1.9600.1.22.8.5.1.60ColumnososTotalVisibleMemorySizeread-onlycurrentTotal amount of physical memory available to the operating system. This value does not necessarily indicate the true amount of physical memory, but what is rep…
1.3.6.1.4.1.9600.1.22.8.5.1.61ColumnososVersionread-onlycurrentVersion number of the operating system. Example: '4.0'
1.3.6.1.4.1.9600.1.22.8.5.1.62ColumnososWindowsDirectoryread-onlycurrentWindows directory of the operating system. Example: 'C:\WINDOWS'
1.3.6.1.4.1.9600.1.22.8.6Tablewin32OSRecoveryConfigTablenot-accessiblecurrentThe Win32_OSRecoveryConfiguration WMI class represents the types of information that will be gathered from memory when the operating system fails. This include…
1.3.6.1.4.1.9600.1.22.8.6.1Rowwin32OSRecoveryConfigEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.6.1.1ColumnosrcIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.6.1.2ColumnosrcAutoRebootread-onlycurrentSystem will automatically reboot during a recovery operation.
1.3.6.1.4.1.9600.1.22.8.6.1.3ColumnosrcCaptionread-onlycurrentShort description of the CIM_Setting object a one-line string.
1.3.6.1.4.1.9600.1.22.8.6.1.4ColumnosrcDebugFilePathread-onlycurrentFull path to the debug file. A debug file is created with the memory state of the computer after a computer failure. Example: 'C:\WinNT\Memory.dmp'
1.3.6.1.4.1.9600.1.22.8.6.1.5ColumnosrcDebugInfoTyperead-onlycurrentWindows XP, Windows Server 2003: Type of debugging information written to the log file.
1.3.6.1.4.1.9600.1.22.8.6.1.6ColumnosrcDescriptionread-onlycurrentDescription of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.8.6.1.7ColumnosrcExpandedDebugFilePathread-onlycurrentWindows XP, Windows Server 2003: Expanded version of the DebugFilePath property. Example: 'C:\WinNT\Memory.dmp'
1.3.6.1.4.1.9600.1.22.8.6.1.8ColumnosrcExpandedMiniDumpDirectoryread-onlycurrentWindows XP, Windows Server 2003: Expanded version of the MiniDumpDirectory property. Example: 'C:\WinNT\MiniDump'
1.3.6.1.4.1.9600.1.22.8.6.1.9ColumnosrcKernelDumpOnlyread-onlycurrentOnly kernel debug information will be written to the debug log file. If TRUE, then only the state of the kernel is written to a file in the event of a system f…
1.3.6.1.4.1.9600.1.22.8.6.1.10ColumnosrcMiniDumpDirectoryread-onlycurrentWindows XP, Windows Server 2003: Directory where small memory dump files will be recorded and accumulated. Example: '%systemRoot%\MiniDump'
1.3.6.1.4.1.9600.1.22.8.6.1.11ColumnosrcNameread-onlycurrentIdentifying name for this instance of the Win32_OSRecoveryConfiguration class.
1.3.6.1.4.1.9600.1.22.8.6.1.12ColumnosrcOverwriteExistingDebugFileread-onlycurrentNew log file will overwrite an existing one.
1.3.6.1.4.1.9600.1.22.8.6.1.13ColumnosrcSendAdminAlertread-onlycurrentAlert message will be sent to the system administrator in the event of an operating system failure.
1.3.6.1.4.1.9600.1.22.8.6.1.14ColumnosrcSettingIDread-onlycurrentIdentifier by which the CIM_Setting object is known.
1.3.6.1.4.1.9600.1.22.8.6.1.15ColumnosrcWriteDebugInforead-onlycurrentDebugging information is to be written to a log file.
1.3.6.1.4.1.9600.1.22.8.6.1.16ColumnosrcWriteToSystemLogread-onlycurrentEvents will be written to a system log.
1.3.6.1.4.1.9600.1.22.8.7Tablewin32QuickFixEngineeringTablenot-accessiblecurrentThe Win32_QuickFixEngineering WMI class represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
1.3.6.1.4.1.9600.1.22.8.7.1Rowwin32QuickFixEngineeringEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.7.1.1ColumnosqfeIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.7.1.2ColumnosqfeCaptionread-onlycurrentShort textual description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.8.7.1.3ColumnosqfeCSNameread-onlycurrentLocal name of the computer system. The value for this property comes from the CIM_ComputerSystem class.
1.3.6.1.4.1.9600.1.22.8.7.1.4ColumnosqfeDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.8.7.1.5ColumnosqfeFixCommentsread-onlycurrentAdditional comments relating to the update. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT C…
1.3.6.1.4.1.9600.1.22.8.7.1.6ColumnosqfeHotFixIDread-onlycurrentUnique identifier associated with a particular QFE. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Wind…
1.3.6.1.4.1.9600.1.22.8.7.1.7ColumnosqfeInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.8.7.1.8ColumnosqfeInstalledByread-onlycurrentPerson who installed the update. If this value is unknown, the property will be empty. This property represents data found in the Windows registry key: HKEY_LO…
1.3.6.1.4.1.9600.1.22.8.7.1.9ColumnosqfeInstalledOnread-onlycurrentUpdate was installed. If this value is unknown, the property will be empty. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE…
1.3.6.1.4.1.9600.1.22.8.7.1.10ColumnosqfeNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property.
1.3.6.1.4.1.9600.1.22.8.7.1.11ColumnosqfeServicePackInEffectread-onlycurrentService pack in effect when the update was applied. If no service pack has been applied, the property takes on the value SP0. If it cannot be determined what s…
1.3.6.1.4.1.9600.1.22.8.7.1.12ColumnosqfeStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.8.8Tablewin32StartupCommandTablenot-accessiblecurrentThe Win32_StartupCommand WMI class represents a command that runs automatically when a user logs onto the computer system.
1.3.6.1.4.1.9600.1.22.8.8.1Rowwin32StartupCommandEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.8.1.1ColumnosscIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.8.1.2ColumnosscCaptionread-onlycurrentShort description (one-line string) of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.8.8.1.3ColumnosscCommandread-onlycurrentCommand run by the startup command. Example: 'c:\winnt\notepad.exe myfile.txt'
1.3.6.1.4.1.9600.1.22.8.8.1.4ColumnosscDescriptionread-onlycurrentDescription of the CIM_Setting object.
1.3.6.1.4.1.9600.1.22.8.8.1.5ColumnosscLocationread-onlycurrentPath where the startup command resides on the disk file system.
1.3.6.1.4.1.9600.1.22.8.8.1.6ColumnosscNameread-onlycurrentFile name of the startup command. Example: 'FindFast'
1.3.6.1.4.1.9600.1.22.8.8.1.7ColumnosscSettingIDread-onlycurrentIdentifier by which the CIM_Setting object is known.
1.3.6.1.4.1.9600.1.22.8.8.1.8ColumnosscUserread-onlycurrentUser name for whom this startup command will run. Example: 'mydomain\myname'
1.3.6.1.4.1.9600.1.22.8.9Scalarwin32Shutdownread-writecurrentThis OID can only be written to and cannot be read! The Win32Shutdown WMI class method provides the full set of shutdown options supported by Win32 operating s…
1.3.6.1.4.1.9600.1.22.8.10Tablewin32WinSATTablenot-accessiblecurrentDefines summary assessment information for the most recent formal assessment.
1.3.6.1.4.1.9600.1.22.8.10.1Rowwin32WinSATEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.8.10.1.1ColumnossatIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.8.10.1.2ColumnossatCPUScoreread-onlycurrentA score for the processors on the computer.
1.3.6.1.4.1.9600.1.22.8.10.1.3ColumnossatD3DScoreread-onlycurrentA score for the three-dimensional graphics (gaming) capabilities of the computer.
1.3.6.1.4.1.9600.1.22.8.10.1.4ColumnossatDiskScoreread-onlycurrentA score for the sequential read throughput on the primary hard disk on the computer.
1.3.6.1.4.1.9600.1.22.8.10.1.5ColumnossatGraphicsScoreread-onlycurrentA score for the graphics capabilities of the computer.
1.3.6.1.4.1.9600.1.22.8.10.1.6ColumnossatMemoryScoreread-onlycurrentA score for the memory throughput and capacity of the computer.
1.3.6.1.4.1.9600.1.22.8.10.1.7ColumnossatTimeTakenread-onlycurrentThis property must be set to 'MostRecentAssessment' in the WHERE clause of your WQL query.
1.3.6.1.4.1.9600.1.22.8.10.1.8ColumnossatAssessmentStateread-onlycurrentState of the assessment. For a description of the possible values, see the WINSAT_ASSESSMENT_STATE enumeration.
1.3.6.1.4.1.9600.1.22.8.10.1.9ColumnossatSPRLevelread-onlycurrentBase score for the computer. For details on the score value, see http://msdn2.microsoft.com/en-us/library/aa969193.a spx
1.3.6.1.4.1.9600.1.22.9IdentitywmiProcessescurrentThe Processes subcategory groups classes that represent system processes and threads.
1.3.6.1.4.1.9600.1.22.9.1Tablewin32ProcessTablenot-accessiblecurrentThe Win32_Process WMI class represents a sequence of events on a Windows operating system. A descendent or member of this class is a sequence that consists of …
1.3.6.1.4.1.9600.1.22.9.1.1Rowwin32ProcessEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.9.1.1.1ColumnospsIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.9.1.1.2ColumnospsCaptionread-onlycurrentShort description of an object a one-line string.
1.3.6.1.4.1.9600.1.22.9.1.1.3ColumnospsCommandLineread-onlycurrentCommand line used to start a specific process, if applicable. This property is new for Windows XP.
1.3.6.1.4.1.9600.1.22.9.1.1.4ColumnospsCreationClassNameread-onlycurrentName of the first concrete class in the inheritance chain that is used to create an instance. You can use this property with other key properties of the class …
1.3.6.1.4.1.9600.1.22.9.1.1.5ColumnospsCreationDateread-onlycurrentDate the process begins executing.
1.3.6.1.4.1.9600.1.22.9.1.1.6ColumnospsCSCreationClassNameread-onlycurrentCreation class name of the scoping computer system.
1.3.6.1.4.1.9600.1.22.9.1.1.7ColumnospsCSNameread-onlycurrentName of the scoping computer system.
1.3.6.1.4.1.9600.1.22.9.1.1.8ColumnospsDescriptionread-onlycurrentDescription of an object.
1.3.6.1.4.1.9600.1.22.9.1.1.9ColumnospsExecutablePathread-onlycurrentPath to the executable file of the process. Example: C:\WINDOWS\EXPLORER.EXE
1.3.6.1.4.1.9600.1.22.9.1.1.10ColumnospsExecutionStateread-onlycurrentThis property is not implemented and does not get populated for any instance of this class. This property is always NULL.
1.3.6.1.4.1.9600.1.22.9.1.1.11ColumnospsHandleread-onlycurrentProcess identifier.
1.3.6.1.4.1.9600.1.22.9.1.1.12ColumnospsHandleCountread-onlycurrentTotal number of open handles owned by the process. HandleCount is the sum of the handles currently open by each thread in this process. A handle is used to exa…
1.3.6.1.4.1.9600.1.22.9.1.1.13ColumnospsInstallDateread-onlycurrentDate an object is installed. The object may be installed without a value being written to this property.
1.3.6.1.4.1.9600.1.22.9.1.1.14ColumnospsKernelModeTimeread-onlycurrentTime in kernel mode, in 100 nanosecond units. If this information is not available, use a value of 0 (zero).
1.3.6.1.4.1.9600.1.22.9.1.1.15ColumnospsMaximumWorkingSetSizeread-onlycurrentMaximum working set size of the process. The working set of a process is the set of memory pages visible to the process in physical RAM. These pages are reside…
1.3.6.1.4.1.9600.1.22.9.1.1.16ColumnospsMinimumWorkingSetSizeread-onlycurrentMinimum working set size of the process. The working set of a process is the set of memory pages visible to the process in physical RAM. These pages are reside…
1.3.6.1.4.1.9600.1.22.9.1.1.17ColumnospsNameread-onlycurrentLabel for an object. When inherited by a subclass, the property can be overridden to be a key property.
1.3.6.1.4.1.9600.1.22.9.1.1.18ColumnospsOSCreationClassNameread-onlycurrentCreation class name of the scoping operating system.
1.3.6.1.4.1.9600.1.22.9.1.1.19ColumnospsOSNameread-onlycurrentName of the scoping operating system.
1.3.6.1.4.1.9600.1.22.9.1.1.20ColumnospsOtherOperationCountread-onlycurrentNumber of I/O operations performed that are not read or write operations.
1.3.6.1.4.1.9600.1.22.9.1.1.21ColumnospsOtherTransferCountread-onlycurrentAmount of data transferred during operations that are not read or write operations.
1.3.6.1.4.1.9600.1.22.9.1.1.22ColumnospsPageFaultsread-onlycurrentNumber of page faults that a process generates. Example: 10
1.3.6.1.4.1.9600.1.22.9.1.1.23ColumnospsPageFileUsageread-onlycurrentAmount of page file space that a process is using currently. Example: 102435
1.3.6.1.4.1.9600.1.22.9.1.1.24ColumnospsParentProcessIdread-onlycurrentUnique identifier of the process that creates a process. Process identifier numbers are reused, so they only identify a process for the lifetime of that proces…
1.3.6.1.4.1.9600.1.22.9.1.1.25ColumnospsPeakPageFileUsageread-onlycurrentMaximum amount of page file space used during the life of a process. Example: 102367
1.3.6.1.4.1.9600.1.22.9.1.1.26ColumnospsPeakVirtualSizeread-onlycurrentMaximum virtual address space a process uses at any one time. Using virtual address space does not necessarily imply corresponding use of either disk or main m…
1.3.6.1.4.1.9600.1.22.9.1.1.27ColumnospsPeakWorkingSetSizeread-onlycurrentPeak working set size of a process. Example: 1413120
1.3.6.1.4.1.9600.1.22.9.1.1.28ColumnospsPriorityread-onlycurrentScheduling priority of a process within an operating system. The higher the value, the higher priority a process receives. Priority values can range from 0 (ze…
1.3.6.1.4.1.9600.1.22.9.1.1.29ColumnospsPrivatePageCountread-onlycurrentCurrent number of pages allocated that are accessible only to the process represented by this Win32_Process instance.
1.3.6.1.4.1.9600.1.22.9.1.1.30ColumnospsProcessIdread-onlycurrentGlobal process identifier that you can use to identify a process. The value is valid from the time a process is created until it is terminated.
1.3.6.1.4.1.9600.1.22.9.1.1.31ColumnospsQuotaNonPagedPoolUsageread-onlycurrentQuota amount of non-paged pool usage for a process. Example: 15
1.3.6.1.4.1.9600.1.22.9.1.1.32ColumnospsQuotaPagedPoolUsageread-onlycurrentQuota amount of paged pool usage for a process. Example: 22
1.3.6.1.4.1.9600.1.22.9.1.1.33ColumnospsQuotaPeakNonPagedPoolUsageread-onlycurrentPeak quota amount of non-paged pool usage for a process. Example: 31
1.3.6.1.4.1.9600.1.22.9.1.1.34ColumnospsQuotaPeakPagedPoolUsageread-onlycurrentPeak quota amount of paged pool usage for a process. Example: 31
1.3.6.1.4.1.9600.1.22.9.1.1.35ColumnospsReadOperationCountread-onlycurrentNumber of read operations performed.
1.3.6.1.4.1.9600.1.22.9.1.1.36ColumnospsReadTransferCountread-onlycurrentAmount of data read.
1.3.6.1.4.1.9600.1.22.9.1.1.37ColumnospsSessionIdread-onlycurrentUnique identifier that an operating system generates when a session is created. A session spans a period of time from log on until log off from a specific syst…
1.3.6.1.4.1.9600.1.22.9.1.1.38ColumnospsStatusread-onlycurrentThis property is not implemented and does not get populated for any instance of this class. It is always NULL.
1.3.6.1.4.1.9600.1.22.9.1.1.39ColumnospsTerminationDateread-onlycurrentProcess was stopped or terminated. To get the termination time, a handle to the process must be held open. Otherwise, this property returns NULL.
1.3.6.1.4.1.9600.1.22.9.1.1.40ColumnospsThreadCountread-onlycurrentNumber of active threads in a process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes an instruction. E…
1.3.6.1.4.1.9600.1.22.9.1.1.41ColumnospsUserModeTimeread-onlycurrentTime in user mode, in 100 nanosecond units. If this information is not available, use a value of 0 (zero).
1.3.6.1.4.1.9600.1.22.9.1.1.42ColumnospsVirtualSizeread-onlycurrentCurrent size of the virtual address space that a process is using. Using virtual address space does not necessarily imply corresponding use of either disk or m…
1.3.6.1.4.1.9600.1.22.9.1.1.43ColumnospsWindowsVersionread-onlycurrentVersion of Windows in which the process is running. Example: 4.0
1.3.6.1.4.1.9600.1.22.9.1.1.44ColumnospsWorkingSetSizeread-onlycurrentAmount of memory in bytes that a process needs to execute efficiently for an operating system that uses page-based memory management. If the system does not ha…
1.3.6.1.4.1.9600.1.22.9.1.1.45ColumnospsWriteOperationCountread-onlycurrentNumber of write operations performed.
1.3.6.1.4.1.9600.1.22.9.1.1.46ColumnospsWriteTransferCountread-onlycurrentAmount of data written.
1.3.6.1.4.1.9600.1.22.9.2Tablewin32ThreadTablenot-accessiblecurrentThe Win32_Thread WMI class represents a thread of execution. While a process must have one thread of execution, the process can create other threads to execute…
1.3.6.1.4.1.9600.1.22.9.2.1Rowwin32ThreadEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.9.2.1.1ColumnostdIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.9.2.1.2ColumnostdCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.9.2.1.3ColumnostdCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.9.2.1.4ColumnostdCSCreationClassNameread-onlycurrentCreation class name of the scoping computer system.
1.3.6.1.4.1.9600.1.22.9.2.1.5ColumnostdCSNameread-onlycurrentName of the scoping computer system.
1.3.6.1.4.1.9600.1.22.9.2.1.6ColumnostdDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.9.2.1.7ColumnostdElapsedTimeread-onlycurrentTotal execution time given to this thread since its creation.
1.3.6.1.4.1.9600.1.22.9.2.1.8ColumnostdExecutionStateread-onlycurrentCurrent operating condition of the thread.
1.3.6.1.4.1.9600.1.22.9.2.1.9ColumnostdHandleread-onlycurrentHandle to a thread. The handle has full access rights by default. With the correct security access, the handle can be used in any function that accepts a threa…
1.3.6.1.4.1.9600.1.22.9.2.1.10ColumnostdInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.9.2.1.11ColumnostdKernelModeTimeread-onlycurrentTime in kernel mode, in 100 nanoseconds. If this information is not available, a value of 0 should be used.
1.3.6.1.4.1.9600.1.22.9.2.1.12ColumnostdNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property.
1.3.6.1.4.1.9600.1.22.9.2.1.13ColumnostdOSCreationClassNameread-onlycurrentCreation class name of the scoping operating system.
1.3.6.1.4.1.9600.1.22.9.2.1.14ColumnostdOSNameread-onlycurrentName of the scoping operating system.
1.3.6.1.4.1.9600.1.22.9.2.1.15ColumnostdPriorityread-onlycurrentDynamic priority of the thread. Each thread has a dynamic priority that the scheduler uses to determine which thread to execute. Initially, a thread's dynamic …
1.3.6.1.4.1.9600.1.22.9.2.1.16ColumnostdPriorityBaseread-onlycurrentCurrent base priority of a thread. The operating system may raise the thread's dynamic priority above the base priority if the thread is handling user input, o…
1.3.6.1.4.1.9600.1.22.9.2.1.17ColumnostdProcessCreationClassNameread-onlycurrentValue of the scoping process CreationClassName property.
1.3.6.1.4.1.9600.1.22.9.2.1.18ColumnostdProcessHandleread-onlycurrentProcess that created the thread. The contents of this property can be used by Windows API elements.
1.3.6.1.4.1.9600.1.22.9.2.1.19ColumnostdStartAddressread-onlycurrentStarting address of the thread. Because any application with appropriate access to the thread can change the thread's context, this value may only be an approx…
1.3.6.1.4.1.9600.1.22.9.2.1.20ColumnostdStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.9.2.1.21ColumnostdThreadStateread-onlycurrentCurrent execution state for the thread.
1.3.6.1.4.1.9600.1.22.9.2.1.22ColumnostdThreadWaitReasonread-onlycurrentReason why the thread is waiting. The value is only valid if the ThreadState member is set to Waiting (6). Event pairs allow communication with protected subsy…
1.3.6.1.4.1.9600.1.22.9.2.1.23ColumnostdUserModeTimeread-onlycurrentTime in user mode, in 100 nanoseconds. If this information is not available, a value of 0 should be used.
1.3.6.1.4.1.9600.1.22.9.3Scalarwin32CreateProcessread-writecurrentThis OID can only be written to and cannot be read! Creates a new process. For security reasons, the script/program to be executed must reside in 'spawn' direc…
1.3.6.1.4.1.9600.1.22.10IdentitywmiSchedulerJobscurrentThe Scheduler Jobs subcategory groups classes that represent scheduled job settings.
1.3.6.1.4.1.9600.1.22.10.1Tablewin32CurrentTimeTablenot-accessiblecurrentThe Win32_CurrentTime abstract is a singleton WMI class that describes a point in time by using the component items such as milliseconds, seconds, minutes, hou…
1.3.6.1.4.1.9600.1.22.10.1.1Rowwin32CurrentTimeEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.10.1.1.1ColumnosctIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.10.1.1.2ColumnosctDayread-onlycurrentCurrent day that matches the query (1-31).
1.3.6.1.4.1.9600.1.22.10.1.1.3ColumnosctDayOfWeekread-onlycurrentCurrent day of the current week that match the query (0-6). By convention, the value 0 (zero) is always Sunday, regardless of the culture or the locale set on …
1.3.6.1.4.1.9600.1.22.10.1.1.4ColumnosctHourread-onlycurrentCurrent hour of the current day (0-23).
1.3.6.1.4.1.9600.1.22.10.1.1.5ColumnosctMillisecondsread-onlycurrentNot used.
1.3.6.1.4.1.9600.1.22.10.1.1.6ColumnosctMinuteread-onlycurrentCurrent minute (0-59).
1.3.6.1.4.1.9600.1.22.10.1.1.7ColumnosctMonthread-onlycurrentCurrent month that matches the query (1-12).
1.3.6.1.4.1.9600.1.22.10.1.1.8ColumnosctQuarterread-onlycurrentCurrent quarter of the current year (1-4).
1.3.6.1.4.1.9600.1.22.10.1.1.9ColumnosctSecondread-onlycurrentCurrent second of the current minute (0-59).
1.3.6.1.4.1.9600.1.22.10.1.1.10ColumnosctWeekInMonthread-onlycurrentCurrent week (1-6) in the current month (1-12).
1.3.6.1.4.1.9600.1.22.10.1.1.11ColumnosctYearread-onlycurrentCurrent year that matches the query (4 digits).
1.3.6.1.4.1.9600.1.22.10.2Tablewin32ScheduledJobTablenot-accessiblecurrentThe Win32_ScheduledJob WMI class represents a job created with the AT command in a command window from Start, Run, or from Control Panel, Scheduled Jobs. You c…
1.3.6.1.4.1.9600.1.22.10.2.1Rowwin32ScheduledJobEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.10.2.1.1ColumnossjIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.10.2.1.2ColumnossjCaptionread-onlycurrentShort description of the object a one-line string.
1.3.6.1.4.1.9600.1.22.10.2.1.3ColumnossjCommandread-onlycurrentName of the command, batch program, or binary file (and command line arguments) that the schedule service uses to invoke the job. Example: 'defrag /q /f'
1.3.6.1.4.1.9600.1.22.10.2.1.4ColumnossjDaysOfMonthread-onlycurrentDays of the month when the job is scheduled to run. If a job is scheduled to run on multiple days of the month, these values can be joined in a logical OR. For…
1.3.6.1.4.1.9600.1.22.10.2.1.5ColumnossjDaysOfWeekread-onlycurrentDays of the week when a job is scheduled to run. If a job is scheduled to run on multiple days of the week, the values can be joined in a logical OR. For examp…
1.3.6.1.4.1.9600.1.22.10.2.1.6ColumnossjDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.10.2.1.7ColumnossjElapsedTimeread-onlycurrentLength of time that the job has been executing.
1.3.6.1.4.1.9600.1.22.10.2.1.8ColumnossjInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.10.2.1.9ColumnossjInteractWithDesktopread-onlycurrentSpecified job is interactive, which means that a user can give input to a scheduled job while it is executing.
1.3.6.1.4.1.9600.1.22.10.2.1.10ColumnossjJobIdread-onlycurrentIdentifying number of the job. It is used by methods as a handle to one job being scheduled on this computer.
1.3.6.1.4.1.9600.1.22.10.2.1.11ColumnossjJobStatusread-onlycurrentStatus of execution the last time this job was scheduled to run.
1.3.6.1.4.1.9600.1.22.10.2.1.12ColumnossjNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property.
1.3.6.1.4.1.9600.1.22.10.2.1.13ColumnossjNotifyread-onlycurrentUser to be notified when job completes or fails.
1.3.6.1.4.1.9600.1.22.10.2.1.14ColumnossjOwnerread-onlycurrentUser that submitted the job.
1.3.6.1.4.1.9600.1.22.10.2.1.15ColumnossjPriorityread-onlycurrentUrgency or importance of execution of a job.
1.3.6.1.4.1.9600.1.22.10.2.1.16ColumnossjRunRepeatedlyread-onlycurrentScheduled job runs repeatedly on the days that the job is scheduled. If FALSE, then the job is run one time.
1.3.6.1.4.1.9600.1.22.10.2.1.17ColumnossjStartTimeread-onlycurrentUTC time to run the job, in the form of YYYYMMDDHHMMSS.MMMMMM(+-)OOO, where YYYYMMDD must be replaced by ********. The replacement is necessary because the sch…
1.3.6.1.4.1.9600.1.22.10.2.1.18ColumnossjStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.10.2.1.19ColumnossjTimeSubmittedread-onlycurrentTime the job is submitted.
1.3.6.1.4.1.9600.1.22.10.2.1.20ColumnossjUntilTimeread-onlycurrentTime after which the job is invalid or must be stopped.
1.3.6.1.4.1.9600.1.22.11IdentitywmiServicescurrentThe Services subcategory groups classes that represent services and base services.
1.3.6.1.4.1.9600.1.22.11.1Tablewin32ServiceTablenot-accessiblecurrentThe Win32_Service WMI class represents a service on a Windows computer system. A service application conforms to the interface rules of the Service Control Man…
1.3.6.1.4.1.9600.1.22.11.1.1Rowwin32ServiceEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.11.1.1.1ColumnossvcIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.11.1.1.2ColumnossvcAcceptPauseread-onlycurrentService can be paused.
1.3.6.1.4.1.9600.1.22.11.1.1.3ColumnossvcAcceptStopread-onlycurrentService can be stopped.
1.3.6.1.4.1.9600.1.22.11.1.1.4ColumnossvcCaptionread-onlycurrentShort description of the object a one-line string.
1.3.6.1.4.1.9600.1.22.11.1.1.5ColumnossvcCheckPointread-onlycurrentValue that the service increments periodically to report its progress during a long start, stop, pause, or continue operation. For example, the service increme…
1.3.6.1.4.1.9600.1.22.11.1.1.6ColumnossvcCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.11.1.1.7ColumnossvcDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.11.1.1.8ColumnossvcDesktopInteractread-onlycurrentService can create or communicate with windows on the desktop.
1.3.6.1.4.1.9600.1.22.11.1.1.9ColumnossvcDisplayNameread-onlycurrentDisplay name of the service. This string has a maximum length of 256 characters. The name is case-preserved in the Service Control Manager. However, DisplayNam…
1.3.6.1.4.1.9600.1.22.11.1.1.10ColumnossvcErrorControlread-onlycurrentSeverity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors …
1.3.6.1.4.1.9600.1.22.11.1.1.11ColumnossvcExitCoderead-onlycurrentWindows error code defining any problems encountered in starting or stopping the service. This property is set to ERROR_SERVICE_SPECIFIC_ERROR (1066) when the …
1.3.6.1.4.1.9600.1.22.11.1.1.12ColumnossvcInstallDateread-onlycurrentDate object is installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.11.1.1.13ColumnossvcNameread-onlycurrentUnique identifier of the service that provides an indication of the functionality that is managed. This functionality is described in more detail in the Descri…
1.3.6.1.4.1.9600.1.22.11.1.1.14ColumnossvcPathNameread-onlycurrentFully-qualified path to the service binary file that implements the service. Example: '\SystemRoot\System32\drivers\afd.sys'
1.3.6.1.4.1.9600.1.22.11.1.1.15ColumnossvcProcessIdread-onlycurrentProcess identifier of the service. Example: 324
1.3.6.1.4.1.9600.1.22.11.1.1.16ColumnossvcServiceSpecificExitCoderead-onlycurrentService-specific error code for errors that occur while the service is either starting or stopping. The exit codes are defined by the service represented by th…
1.3.6.1.4.1.9600.1.22.11.1.1.17ColumnossvcServiceTyperead-onlycurrentType of service provided to calling processes.
1.3.6.1.4.1.9600.1.22.11.1.1.18ColumnossvcStartedread-onlycurrentService has been started.
1.3.6.1.4.1.9600.1.22.11.1.1.19ColumnossvcStartModeread-onlycurrentStart mode of the Windows base service. Value Meaning 'Boot' Device driver started by the operating system loader (valid only for driver services) 'System' Dev…
1.3.6.1.4.1.9600.1.22.11.1.1.20ColumnossvcStartNameread-onlycurrentAccount name under which a service runs. Depending on the service type, the account name may be in the form of DomainName\Username. The service process is logg…
1.3.6.1.4.1.9600.1.22.11.1.1.21ColumnossvcStateread-writecurrentCurrent state of the base service. Setting the state to stopped, running, or paused will either stop, start (or resume), or pause the service.
1.3.6.1.4.1.9600.1.22.11.1.1.22ColumnossvcStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.11.1.1.23ColumnossvcSystemCreationClassNameread-onlycurrentType name of the system that hosts this service.
1.3.6.1.4.1.9600.1.22.11.1.1.24ColumnossvcSystemNameread-onlycurrentName of the system that hosts this service.
1.3.6.1.4.1.9600.1.22.11.1.1.25ColumnossvcTagIdread-onlycurrentUnique tag value for this service in the group. A value of 0 (zero) indicates that the service does not have a tag. A tag can be used to order service startup …
1.3.6.1.4.1.9600.1.22.11.1.1.26ColumnossvcWaitHintread-onlycurrentEstimated time required (in milliseconds) for a pending start, stop, pause, or continue operation. After the specified amount of time has elapsed, the service …
1.3.6.1.4.1.9600.1.22.12IdentitywmiSharescurrentThe Shares subcategory groups classes that represent details of shared resources such as printers and folders.
1.3.6.1.4.1.9600.1.22.12.1Tablewin32DFSNodeTablenot-accessiblecurrentThe Win32_DFSNode WMI class represents a root or junction node of a domain-based or stand-alone distributed file system (DFS). The DFS root is also represented…
1.3.6.1.4.1.9600.1.22.12.1.1Rowwin32DFSNodeEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.12.1.1.1ColumnosdfsnIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.12.1.1.2ColumnosdfsnCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.1.1.3ColumnosdfsnDescriptionread-onlycurrentComment that describes the link. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.1.1.4ColumnosdfsnInstallDateread-onlycurrentDate that an object is installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSyst…
1.3.6.1.4.1.9600.1.22.12.1.1.5ColumnosdfsnNameread-onlycurrentIdentifier for the DFS node. It is the same as the entry path of a node, based on the Universal Naming Convention (UNC). It can take one of the following two f…
1.3.6.1.4.1.9600.1.22.12.1.1.6ColumnosdfsnRootread-onlycurrentIndicate whether the node is a DFS root or a link. A value of TRUE indicates that the node is a root.
1.3.6.1.4.1.9600.1.22.12.1.1.7ColumnosdfsnStateread-onlycurrentStatus of the node.
1.3.6.1.4.1.9600.1.22.12.1.1.8ColumnosdfsnStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.12.1.1.9ColumnosdfsnTimeoutread-onlycurrentTime in seconds that the client caches the referral of this link.
1.3.6.1.4.1.9600.1.22.12.2Tablewin32DFSTargetTablenot-accessiblecurrentThe Win32_DFSTarget WMI class represents a target of a DFS node. This class was added for Windows Server 2003 family.
1.3.6.1.4.1.9600.1.22.12.2.1Rowwin32DFSTargetEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.12.2.1.1ColumnosdfstIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.12.2.1.2ColumnosdfstCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.2.1.3ColumnosdfstDescriptionread-onlycurrentComment that describes the link. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.2.1.4ColumnosdfstInstallDateread-onlycurrentDate and time when object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_Mana…
1.3.6.1.4.1.9600.1.22.12.2.1.5ColumnosdfstLinkNameread-onlycurrentEntry path of the node to which this target belongs.
1.3.6.1.4.1.9600.1.22.12.2.1.6ColumnosdfstNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElem…
1.3.6.1.4.1.9600.1.22.12.2.1.7ColumnosdfstServerNameread-onlycurrentName of the server that the node references
1.3.6.1.4.1.9600.1.22.12.2.1.8ColumnosdfstShareNameread-onlycurrentString representing the name of the share that the node references.
1.3.6.1.4.1.9600.1.22.12.2.1.9ColumnosdfstStateread-onlycurrentState of the target.
1.3.6.1.4.1.9600.1.22.12.2.1.10ColumnosdfstStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.12.3Tablewin32ServerConnectionTablenot-accessiblecurrentThe Win32_ServerConnection WMI class represents the connections made from a remote computer to a shared resource on the local computer. This class is new for W…
1.3.6.1.4.1.9600.1.22.12.3.1Rowwin32ServerConnectionEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.12.3.1.1ColumnosscnIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.12.3.1.2ColumnosscnActiveTimeread-onlycurrentNumber of seconds since this connection was established.
1.3.6.1.4.1.9600.1.22.12.3.1.3ColumnosscnCaptionread-onlycurrentShort description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.3.1.4ColumnosscnComputerNameread-onlycurrentName of the computer from which the connection is established.
1.3.6.1.4.1.9600.1.22.12.3.1.5ColumnosscnConnectionIDread-onlycurrentUnique identifier for the connection.
1.3.6.1.4.1.9600.1.22.12.3.1.6ColumnosscnDescriptionread-onlycurrentComment that describes the link. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.3.1.7ColumnosscnInstallDateread-onlycurrentDate/time when the object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_Mana…
1.3.6.1.4.1.9600.1.22.12.3.1.8ColumnosscnNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElem…
1.3.6.1.4.1.9600.1.22.12.3.1.9ColumnosscnNumberOfFilesread-onlycurrentNumber of open files associated with this connection.
1.3.6.1.4.1.9600.1.22.12.3.1.10ColumnosscnNumberOfUsersread-onlycurrentNumber of users associated with this connection.
1.3.6.1.4.1.9600.1.22.12.3.1.11ColumnosscnShareNameread-onlycurrentShare resource to which the connection is established.
1.3.6.1.4.1.9600.1.22.12.3.1.12ColumnosscnStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.12.3.1.13ColumnosscnUserNameread-onlycurrentName of the user that made a connection.
1.3.6.1.4.1.9600.1.22.12.4Tablewin32ServerSessionTablenot-accessiblecurrentThe Win32_ServerSession WMI class represents the sessions that have been established with the local computer by users on a remote computer. This class was adde…
1.3.6.1.4.1.9600.1.22.12.4.1Rowwin32ServerSessionEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.12.4.1.1ColumnosssIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.12.4.1.2ColumnosssActiveTimeread-onlycurrentNumber of seconds since this session was established.
1.3.6.1.4.1.9600.1.22.12.4.1.3ColumnosssCaptionread-onlycurrentShort description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.4.1.4ColumnosssClientTyperead-onlycurrentType of the connected client.
1.3.6.1.4.1.9600.1.22.12.4.1.5ColumnosssComputerNameread-onlycurrentName of the computer from which the session is established.
1.3.6.1.4.1.9600.1.22.12.4.1.6ColumnosssDescriptionread-onlycurrentComment that describes the link. This property is inherited from CIM_ManagedSystemElement.
1.3.6.1.4.1.9600.1.22.12.4.1.7ColumnosssIdleTimeread-onlycurrentNumber of seconds that the session has been idle.
1.3.6.1.4.1.9600.1.22.12.4.1.8ColumnosssInstallDateread-onlycurrentDate and time the object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_Manag…
1.3.6.1.4.1.9600.1.22.12.4.1.9ColumnosssNameread-onlycurrentLabel by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElem…
1.3.6.1.4.1.9600.1.22.12.4.1.10ColumnosssResourcesOpenedread-onlycurrentNumber of files, devices, and pipes opened during this session.
1.3.6.1.4.1.9600.1.22.12.4.1.11ColumnosssSessionTyperead-onlycurrentMethod of opening the session. This property is available only on Windows NT.
1.3.6.1.4.1.9600.1.22.12.4.1.12ColumnosssStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.12.4.1.13ColumnosssTransportNameread-onlycurrentName of the transport that the client is using to communicate with the server.
1.3.6.1.4.1.9600.1.22.12.4.1.14ColumnosssUserNameread-onlycurrentName of the user that established the session.
1.3.6.1.4.1.9600.1.22.12.5Tablewin32ShareTablenot-accessiblecurrentThe Win32_Share class represents a shared resource on a Windows system. This may be a disk drive, printer, inter-process communication, or other shareable devi…
1.3.6.1.4.1.9600.1.22.12.5.1Rowwin32ShareEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.12.5.1.1ColumnosshIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.12.5.1.2ColumnosshAccessMaskread-onlycurrentList of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under …
1.3.6.1.4.1.9600.1.22.12.5.1.3ColumnosshAllowMaximumread-onlycurrentNumber of concurrent users for this resource has been limited. If TRUE, the value in the MaximumAllowed property is ignored.
1.3.6.1.4.1.9600.1.22.12.5.1.4ColumnosshCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.12.5.1.5ColumnosshDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.12.5.1.6ColumnosshInstallDateread-onlycurrentObject was installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.12.5.1.7ColumnosshMaximumAllowedread-onlycurrentLimit on the maximum number of users allowed to use this resource concurrently. The value is only valid if the AllowMaximum property is set to FALSE
1.3.6.1.4.1.9600.1.22.12.5.1.8ColumnosshNameread-onlycurrentAlias given to a path set up as a share on a Windows system. Example: 'public'
1.3.6.1.4.1.9600.1.22.12.5.1.9ColumnosshPathread-onlycurrentLocal path of the Windows share. Example: 'C:\Program Files'
1.3.6.1.4.1.9600.1.22.12.5.1.10ColumnosshStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.12.5.1.11ColumnosshTyperead-onlycurrentType of resource being shared. Types include disk drives, print queues, interprocess communications (IPC), and general devices. Value Meaning 0 Disk Drive 1 Pr…
1.3.6.1.4.1.9600.1.22.13IdentitywmiStoragecurrentThe Storage subcategory groups classes that represent storage information.
1.3.6.1.4.1.9600.1.22.13.1Tablewin32ShadowContextTablenot-accessiblecurrentThe Win32_ShadowContext class specifies how a shadow copy is to be created, queried, or deleted, and the degree of writer involvement. Windows XP and earlier: …
1.3.6.1.4.1.9600.1.22.13.1.1Rowwin32ShadowContextEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.13.1.1.1ColumnosscxIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.13.1.1.2ColumnosscxClientAccessibleread-onlycurrentIf true, the shadow copy is created by the Windows Previous Versions component.
1.3.6.1.4.1.9600.1.22.13.1.1.3ColumnosscxDifferentialread-onlycurrentIf true, the shadow copy is created by a differential shadow copy provider. The provider can be implemented in hardware or software.
1.3.6.1.4.1.9600.1.22.13.1.1.4ColumnosscxExposedLocallyread-onlycurrentIf true, the shadow copy is exposed on a remote computer with a network share. If both ExposedLocally and ExposedRemotely are false, the shadow copy is hidden.
1.3.6.1.4.1.9600.1.22.13.1.1.5ColumnosscxExposedRemotelyread-onlycurrentIf true, the shadow copy is exposed on a remote computer with a network share. If both ExposedRemotely and ExposedLocally are false, the shadow copy is hidden.
1.3.6.1.4.1.9600.1.22.13.1.1.6ColumnosscxHardwareAssistedread-onlycurrentIf true, the shadow copy is created by a hardware shadow copy provider.
1.3.6.1.4.1.9600.1.22.13.1.1.7ColumnosscxImportedread-onlycurrentIf true, the shadow copy is imported to a computer by using the Import method not created by using the Create method.
1.3.6.1.4.1.9600.1.22.13.1.1.8ColumnosscxNameread-onlycurrentName of the context.
1.3.6.1.4.1.9600.1.22.13.1.1.9ColumnosscxNoAutoReleaseread-onlycurrentIf true, the shadow copy is retained after the requestor process ends. If false, the shadow copy is automatically deleted when the shadow copy requestor proces…
1.3.6.1.4.1.9600.1.22.13.1.1.10ColumnosscxNotSurfacedread-onlycurrentIf true, the shadow copy is not currently in the device namespace of the local computer.
1.3.6.1.4.1.9600.1.22.13.1.1.11ColumnosscxNoWritersread-onlycurrentIf true, the shadow copy is created without involvement of shadow copy writer components.
1.3.6.1.4.1.9600.1.22.13.1.1.12ColumnosscxPersistentread-onlycurrentIf true, the shadow copy persists across reboots.
1.3.6.1.4.1.9600.1.22.13.1.1.13ColumnosscxPlexread-onlycurrentIf true, the shadow copy is created by a split mirror shadow copy provider.
1.3.6.1.4.1.9600.1.22.13.1.1.14ColumnosscxTransportableread-onlycurrentIf true, the shadow copy can be surfaced on another computer. If false, and the volumes are surfaced locally, it may not be possible to surface them later on a…
1.3.6.1.4.1.9600.1.22.13.2Tablewin32ShadowCopyTablenot-accessiblecurrentThe Win32_ShadowCopy class is a storage extent that represents a duplicate copy of the original volume at a previous time. Windows XP and earlier: This class i…
1.3.6.1.4.1.9600.1.22.13.2.1Rowwin32ShadowCopyEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.13.2.1.1ColumnosscpIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.13.2.1.2ColumnosscpClientAccessibleread-onlycurrentIf true, the shadow copy is created by the Windows Previous Versions component.
1.3.6.1.4.1.9600.1.22.13.2.1.3ColumnosscpCountread-onlycurrentNumber of shadow copies in a shadow copy set to which a shadow copy belongs.
1.3.6.1.4.1.9600.1.22.13.2.1.4ColumnosscpDeviceObjectread-onlycurrentWindows object manager name for an underlying storage device that supports the original volume.
1.3.6.1.4.1.9600.1.22.13.2.1.5ColumnosscpDifferentialread-onlycurrentIf true, the shadow copy is created by a differential shadow copy provider. The provider can be implemented in hardware or software.
1.3.6.1.4.1.9600.1.22.13.2.1.6ColumnosscpExposedLocallyread-onlycurrentIf true, the shadow copy is exposed on the local computer with a drive letter or mount point. If ExposedLocally and ExposedRemotely are not set, the shadow cop…
1.3.6.1.4.1.9600.1.22.13.2.1.7ColumnosscpExposedNameread-onlycurrentFile system name of a shadow copy when it is exposed. The ExposedName property might contain a drive letter or mount point. The ExposedName property is NULL wh…
1.3.6.1.4.1.9600.1.22.13.2.1.8ColumnosscpExposedRemotelyread-onlycurrentIf true, the shadow copy is exposed on a remote computer with a network share. If ExposedRemotely and ExposedLocally are not set, the shadow copy is hidden.
1.3.6.1.4.1.9600.1.22.13.2.1.9ColumnosscpHardwareAssistedread-onlycurrentIf true, the shadow copy is created by a hardware shadow copy provider.
1.3.6.1.4.1.9600.1.22.13.2.1.10ColumnosscpIDread-onlycurrentUnique identifier for a shadow copy on the system.
1.3.6.1.4.1.9600.1.22.13.2.1.11ColumnosscpImportedread-onlycurrentIf true, the shadow copy is imported to a computer by using the Import method not created by using the Create method.
1.3.6.1.4.1.9600.1.22.13.2.1.12ColumnosscpNoAutoReleaseread-onlycurrentIf true, the shadow copy is retained after the requestor process ends. If false, the shadow copy is automatically deleted when the requestor process ends.
1.3.6.1.4.1.9600.1.22.13.2.1.13ColumnosscpNotSurfacedread-onlycurrentIf true, the shadow copy is not currently in the device namespace of a local computer.
1.3.6.1.4.1.9600.1.22.13.2.1.14ColumnosscpNoWritersread-onlycurrentIf true, the shadow copy is created with the involvement of the shadow copy writer components.
1.3.6.1.4.1.9600.1.22.13.2.1.15ColumnosscpOriginatingMachineread-onlycurrentName of the computer that hosts the original volume.
1.3.6.1.4.1.9600.1.22.13.2.1.16ColumnosscpPersistentread-onlycurrentIf true, the shadow copy is persistent across reboots.
1.3.6.1.4.1.9600.1.22.13.2.1.17ColumnosscpPlexread-onlycurrentIf true, the shadow copy is created by a split mirror shadow copy provider. The provider can be implemented in hardware or software.
1.3.6.1.4.1.9600.1.22.13.2.1.18ColumnosscpProviderIDread-onlycurrentUnique identifier for a shadow provider that creates a shadow.
1.3.6.1.4.1.9600.1.22.13.2.1.19ColumnosscpServiceMachineread-onlycurrentName of the computer that services the shadow copy.
1.3.6.1.4.1.9600.1.22.13.2.1.20ColumnosscpSetIDread-onlycurrentUnique identifier for a shadow copy set to which the shadow belongs.
1.3.6.1.4.1.9600.1.22.13.2.1.21ColumnosscpStateread-onlycurrentCurrent state of a shadow copy.
1.3.6.1.4.1.9600.1.22.13.2.1.22ColumnosscpTransportableread-onlycurrentIf true, the shadow copy can be surfaced on another computer. If false, and the volumes are surfaced locally, it may not be possible to surface them later on a…
1.3.6.1.4.1.9600.1.22.13.2.1.23ColumnosscpVolumeNameread-onlycurrentName of the original volume for which a shadow copy is made.
1.3.6.1.4.1.9600.1.22.13.3Tablewin32ShadowProviderTablenot-accessiblecurrentTypically, the Win32_ShadowProvider class represents a component that is a combination of user-mode and kernel or firmware implementation, that creates and rep…
1.3.6.1.4.1.9600.1.22.13.3.1Rowwin32ShadowProviderEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.13.3.1.1ColumnosspIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.13.3.1.2ColumnosspCLSIDread-onlycurrentCommon Object Model (COM) class ID registered for a shadow provider.
1.3.6.1.4.1.9600.1.22.13.3.1.3ColumnosspIDread-onlycurrentUniquely identifies the shadow provider on a system.
1.3.6.1.4.1.9600.1.22.13.3.1.4ColumnosspNameread-onlycurrentDescriptive name of a provider.
1.3.6.1.4.1.9600.1.22.13.3.1.5ColumnosspTyperead-onlycurrentSpecifies the class to which a shadow provider belongs.
1.3.6.1.4.1.9600.1.22.13.3.1.6ColumnosspVersionread-onlycurrentText representation of a shadow provider version.
1.3.6.1.4.1.9600.1.22.13.3.1.7ColumnosspVersionIDread-onlycurrentNumeric representation of a shadow provider version.
1.3.6.1.4.1.9600.1.22.14IdentitywmiEventLogcurrentThe Windows NT Event Log subcategory groups classes that represent events, event log entries, event log configuration settings, and so on.
1.3.6.1.4.1.9600.1.22.14.1Tablewin32NTEventlogFileTablenot-accessiblecurrentThe Win32_NTEventlogFile WMI class represents a logical file or directory of Windows NT events. The file is also known as the event log.
1.3.6.1.4.1.9600.1.22.14.1.1Rowwin32NTEventlogFileEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.14.1.1.1ColumnoselfIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.14.1.1.2ColumnoselfAccessMaskread-onlycurrentList of access rights to the given file or directory of Windows NT events held by the user or group on whose behalf the instance is returned.
1.3.6.1.4.1.9600.1.22.14.1.1.3ColumnoselfArchiveread-onlycurrentIf True, a file of Windows NT events should be archived.
1.3.6.1.4.1.9600.1.22.14.1.1.4ColumnoselfCaptionread-onlycurrentShort description (one-line string) of the object.
1.3.6.1.4.1.9600.1.22.14.1.1.5ColumnoselfCompressedread-onlycurrentIf True, a file of Windows NT events is compressed.
1.3.6.1.4.1.9600.1.22.14.1.1.6ColumnoselfCompressionMethodread-onlycurrentAlgorithm or tool used to compress the logical file of Windows NT events. If it is not possible (or not desired) to describe the compression scheme (perhaps be…
1.3.6.1.4.1.9600.1.22.14.1.1.7ColumnoselfCreationClassNameread-onlycurrentName of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, …
1.3.6.1.4.1.9600.1.22.14.1.1.8ColumnoselfCreationDateread-onlycurrentFile of Windows NT events was created.
1.3.6.1.4.1.9600.1.22.14.1.1.9ColumnoselfCSCreationClassNameread-onlycurrentClass of the computer system.
1.3.6.1.4.1.9600.1.22.14.1.1.10ColumnoselfCSNameread-onlycurrentName of the computer system.
1.3.6.1.4.1.9600.1.22.14.1.1.11ColumnoselfDescriptionread-onlycurrentDescription of the object.
1.3.6.1.4.1.9600.1.22.14.1.1.12ColumnoselfDriveread-onlycurrentDrive letter (including colon) of the file of Windows NT events. Example: 'c:'
1.3.6.1.4.1.9600.1.22.14.1.1.13ColumnoselfEightDotThreeFileNameread-onlycurrentDOS-compatible file name for this file of Windows NT events. Example: 'c:\progra~1'
1.3.6.1.4.1.9600.1.22.14.1.1.14ColumnoselfEncryptedread-onlycurrentFile of Windows NT events is encrypted.
1.3.6.1.4.1.9600.1.22.14.1.1.15ColumnoselfEncryptionMethodread-onlycurrentAlgorithm or tool used to encrypt the logical file. If it is not possible (or not desired) to describe the encryption scheme (perhaps for security reasons), us…
1.3.6.1.4.1.9600.1.22.14.1.1.16ColumnoselfExtensionread-onlycurrentFile extension (without the dot) of Windows NT events. Example: 'txt', 'mof', 'mdb'
1.3.6.1.4.1.9600.1.22.14.1.1.17ColumnoselfFileNameread-onlycurrentFile name (without extension) of the file of Windows NT events. Example: 'autoexec'
1.3.6.1.4.1.9600.1.22.14.1.1.18ColumnoselfFileSizeread-onlycurrentSize of the file of Windows NT events (in bytes).
1.3.6.1.4.1.9600.1.22.14.1.1.19ColumnoselfFileTyperead-onlycurrentFile type (indicated by the Extension property).
1.3.6.1.4.1.9600.1.22.14.1.1.20ColumnoselfFSCreationClassNameread-onlycurrentClass of the file system.
1.3.6.1.4.1.9600.1.22.14.1.1.21ColumnoselfFSNameread-onlycurrentName of the file system.
1.3.6.1.4.1.9600.1.22.14.1.1.22ColumnoselfHiddenread-onlycurrentIf True, a file of Windows NT events is hidden.
1.3.6.1.4.1.9600.1.22.14.1.1.23ColumnoselfInstallDateread-onlycurrentObject is installed. This property does not need a value to indicate that the object is installed.
1.3.6.1.4.1.9600.1.22.14.1.1.24ColumnoselfInUseCountread-onlycurrentNumber of 'file opens' that are currently active against the file of Windows NT events.
1.3.6.1.4.1.9600.1.22.14.1.1.25ColumnoselfLastAccessedread-onlycurrentFile of Windows NT events was last accessed.
1.3.6.1.4.1.9600.1.22.14.1.1.26ColumnoselfLastModifiedread-onlycurrentFile of Windows NT events was last modified.
1.3.6.1.4.1.9600.1.22.14.1.1.27ColumnoselfLogFileNameread-onlycurrentName of the file of Windows NT events. Standard log file names include Application, System, and Security.
1.3.6.1.4.1.9600.1.22.14.1.1.28ColumnoselfManufacturerread-onlycurrentManufacturer from version resource, if one is present.
1.3.6.1.4.1.9600.1.22.14.1.1.29ColumnoselfMaxFileSizeread-onlycurrentMaximum size (in bytes) permitted for the file of Windows NT events. If the file exceeds its maximum size, its contents are moved to another file and the prima…
1.3.6.1.4.1.9600.1.22.14.1.1.30ColumnoselfNameread-onlycurrentInherited name that serves as a key of a logical file instance of Windows NT events within a file system. Full path names should be provided. Example: 'c:\winn…
1.3.6.1.4.1.9600.1.22.14.1.1.31ColumnoselfNumberOfRecordsread-onlycurrentNumber of records in the file of Windows NT events. This value is determined by calling the Windows function GetNumberOfEventLogRecords.
1.3.6.1.4.1.9600.1.22.14.1.1.32ColumnoselfOverwriteOutDatedread-onlycurrentNumber of days after which an event can be overwritten. Value Meaning 0: Any entry can be overwritten when necessary. 1..365: Events that have been in the log …
1.3.6.1.4.1.9600.1.22.14.1.1.33ColumnoselfOverWritePolicyread-onlycurrentCurrent overwrite policy the Event Log service employs for this log file. Data can be never overwritten, or overwritten when necessary or when outdated. When d…
1.3.6.1.4.1.9600.1.22.14.1.1.34ColumnoselfPathread-onlycurrentPath of the file of Windows NT event. This includes leading and trailing backslashes. Example: '\windows\system\'
1.3.6.1.4.1.9600.1.22.14.1.1.35ColumnoselfReadableread-onlycurrentIf True, a file of Windows NT event can be read.
1.3.6.1.4.1.9600.1.22.14.1.1.36ColumnoselfSourcesread-onlycurrentList of applications that are registered to log into this log file.
1.3.6.1.4.1.9600.1.22.14.1.1.37ColumnoselfStatusread-onlycurrentCurrent status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' …
1.3.6.1.4.1.9600.1.22.14.1.1.38ColumnoselfSystemread-onlycurrentIf True, a file of Windows NT event is a system file.
1.3.6.1.4.1.9600.1.22.14.1.1.39ColumnoselfVersionread-onlycurrentVersion string from version resource if one is present.
1.3.6.1.4.1.9600.1.22.14.1.1.40ColumnoselfWriteableread-onlycurrentIf True, a file of Windows NT event can be written.
1.3.6.1.4.1.9600.1.22.14.2Tablewin32NTLogEventTablenot-accessiblecurrentThe Win32_NTLogEvent WMI class is used to translate instances from the Windows NT event log. An application must have SeSecurityPrivilege to receive events fro…
1.3.6.1.4.1.9600.1.22.14.2.1Rowwin32NTLogEventEntrynot-accessiblecurrentNone
1.3.6.1.4.1.9600.1.22.14.2.1.1ColumnoselIndexread-onlycurrentThe value of this object uniquely identifies the instance entry for this class.
1.3.6.1.4.1.9600.1.22.14.2.1.2ColumnoselCategoryread-onlycurrentSubcategory for this event. This subcategory is source-specific.
1.3.6.1.4.1.9600.1.22.14.2.1.3ColumnoselCategoryStringread-onlycurrentTranslation of the subcategory. The translation is source-specific.
1.3.6.1.4.1.9600.1.22.14.2.1.4ColumnoselComputerNameread-onlycurrentName of the computer that generated this event.
1.3.6.1.4.1.9600.1.22.14.2.1.5ColumnoselDataread-onlycurrentList of the binary data that accompanied the report of the Windows NT event.
1.3.6.1.4.1.9600.1.22.14.2.1.6ColumnoselEventCoderead-onlycurrentValue of the lower 16-bits of the EventIdentifier property. It is present to match the value displayed in the Windows NT Event Viewer. Note that two events fro…
1.3.6.1.4.1.9600.1.22.14.2.1.7ColumnoselEventIdentifierread-onlycurrentIdentifier of the event. This is specific to the source that generated the event log entry and is used, together with SourceName, to uniquely identify a Window…
1.3.6.1.4.1.9600.1.22.14.2.1.8ColumnoselEventTyperead-onlycurrentType of event.
1.3.6.1.4.1.9600.1.22.14.2.1.9ColumnoselInsertionStringsread-onlycurrentList of the insertion strings that accompanied the report of the Windows NT event.
1.3.6.1.4.1.9600.1.22.14.2.1.10ColumnoselLogfileread-onlycurrentName of Windows NT event log file. This is used together with RecordNumber to uniquely identify an instance of this class.
1.3.6.1.4.1.9600.1.22.14.2.1.11ColumnoselMessageread-onlycurrentEvent message as it appears in the Windows NT event log. This is a standard message with zero or more insertion strings supplied by the source of the Windows N…
1.3.6.1.4.1.9600.1.22.14.2.1.12ColumnoselRecordNumberread-onlycurrentIdentifies the event within the Windows NT event log file. This is specific to the log file and is used together with the log file name to uniquely identify an…
1.3.6.1.4.1.9600.1.22.14.2.1.13ColumnoselSourceNameread-onlycurrentName of the source (application, service, driver, subsystem) that generated the entry. It is used, together with EventIdentifier to uniquely identify an Window…
1.3.6.1.4.1.9600.1.22.14.2.1.14ColumnoselTimeGeneratedread-onlycurrentSource generated the event.
1.3.6.1.4.1.9600.1.22.14.2.1.15ColumnoselTimeWrittenread-onlycurrentEvent was written to the logfile.
1.3.6.1.4.1.9600.1.22.14.2.1.16ColumnoselTyperead-onlycurrentType of event. This is an enumerated string. It is preferable to use the EventType property rather than the Type property. Value Meaning 1 Error 2 Warning 4 In…
1.3.6.1.4.1.9600.1.22.14.2.1.17ColumnoselUserread-onlycurrentUser name of the logged-on user when the event occurred. If the user name cannot be determined, this will be NULL.