INFORMANT-OS: View SNMP OID List / Download MIB

The MIB module for informant operating system WMI entities.

The Desktop subcategory groups classes that represent objects that define a specific desktop configuration.

The Win32_Desktop WMI class represents the common characteristics of a user's desktop. The properties of this class can be modified by the user to customize the desktop.

None

The value of this object uniquely identifies the instance entry for this class.

Width of the borders around all windows with adjustable borders. Example: 3

Short description (one-line string) of the CIM_Setting object.

Fast task switching is turned on. Fast task switching allows the user to switch between windows using the ALT+TAB keyboard combination.

Length of time between successive cursor blinks. Example: 530

Description of the CIM_Setting object.

Contents of a window are shown when a user moves the window.

Spacing of the grid that windows are bound to on the desktop. This makes organizing windows easier. The spacing is usually fine enough that the user does not notice it. Example: 1

Spacing between icons. Example: 75

Font used for the names of the icons. Example: 'MS San Serif'

Icon font size. Example: 9

Icon's title text wraps to the next line.

Name that identifies the current desktop profile. Example: 'MainProf'

Name of the pattern used as the background for the desktop.

Screen saver is active.

Name of the current screen saver executable file. Example: 'LOGON.SCR'

Password is enabled for the screen saver.

Amount of time that passes before the screen saver starts.

Identifier by which the CIM_Setting object is known.

File name for the wallpaper design on the background of the desktop. Example: 'WINNT.BMP'

Wallpaper is stretched to fill the entire screen. Microsoft Plus! must be installed before this option is available. If FALSE, the wallpaper retains its original dimensions on the desktop background.

Wallpaper is tiled or centered.

The Win32_Environment WMI class represents an environment or system environment setting on a Windows computer system.

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the object.

Description of the object.

Object was installed. This property does not need a value to indicate that the object is installed.

Character string specifying the name of a Windows environment variable. By specifying the name of a variable that does not yet exist, an application creates a new environment variable. Example: 'Path'

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

Indicating whether the variable is a system variable. A system variable is set by the operating system, and is independent from user environment settings.

Name of the owner of the environment setting. It is set to for settings that are specific to the Windows system (as opposed to a specific user) and for default user settings. Example: 'Jsmith'

Placeholder variable of a Windows environment variable. Information like the file system directory can change from computer to computer. The operating system substitutes placeholders for these. Example: '%SystemRoot%'

The Win32_TimeZone WMI class represents the time zone information for a Windows system, which includes changes needed for the daylight saving time transition.

None

The value of this object uniquely identifies the instance entry for this class.

Current bias for local time translation. The bias is the difference between Universal Time Coordinate (UTC) and local time. All translations between UTC and local time are based on the following formula: UTC = local time + bias. This property is required.

Short description of the CIM_Setting object a one-line string.

Bias value to be used during local time translations that occur during daylight time. This property is ignored if a value for the DaylightDay property is not supplied. The value of this property is added to the Bias property to form the bias used during daylight time. In most time zones, the value of this property is -60.

DaylightDayOfWeek of the DaylightMonth when the transition from standard time to daylight saving time occurs on this operating system. Example: If the transition day (DaylightDayOfWeek) occurs on a Sunday then the value '1' indicates the first Sunday of the DaylightMonth, '2' indicates the second Sunday and so on. The value '5' indicates the last DaylightDayOfWeek in the month.

Day of the week when the transition from standard time to daylight saving time occurs on an operating system. Enumeration: 'monday': 2, 'tuesday': 3, 'friday': 6, 'wednesday': 4, 'thursday': 5, 'sunday': 1, 'saturday': 7.

Hour of the day when the transition from standard time to daylight saving time occurs on an operating system. Example: 2

Millisecond of the DaylightSecond when the transition from standard time to daylight saving time occurs on an operating system.

Minute of the DaylightHour when the transition from standard time to daylight saving time occurs on an operating system. Example: 59

Month when the transition from standard time to daylight saving time occurs on an operating system. Enumeration: 'february': 2, 'october': 10, 'march': 3, 'august': 8, 'september': 9, 'may': 5, 'january': 1, 'june': 6, 'april': 4, 'december': 12, 'july': 7, 'november': 11.

Time zone being represented when daylight saving time is in effect. Example: 'EDT' (Eastern Daylight Time)

Second of the DaylightMinute when the transition from standard time to daylight saving time occurs on an operating system. Example: 59

Year when daylight saving time is in effect. This property is not required. Example: 1997

Description of the CIM_Setting object.

Identifier for the CIM_Setting object.

Bias value to use when daylight saving time is not in effect. This property is ignored if a value for StandardDay is not supplied. The value of this property is added to the Bias property to form the bias during standard time. Example: 0

StandardDayOfWeek of the StandardMonth when the transition from daylight saving time to standard time occurs on an operating system. If the transition day (StandardDayOfWeek) occurs on a Sunday then the value '1' indicates the first Sunday of the StandardMonth, '2' indicates the second Sunday and so on. The value '5' indicates the last StandardDayOfWeek in the month.

Day of the week when the transition from daylight saving time to standard time occurs on an operating system. Enumeration: 'monday': 2, 'tuesday': 3, 'friday': 6, 'wednesday': 4, 'thursday': 5, 'sunday': 1, 'saturday': 7.

Hour of the day when the transition from daylight saving time to standard time occurs on an operating system. Example: 11

Millisecond of the StandardSecond when the transition from daylight saving time to standard time occurs on an operating system.

Minute of the StandardDay when the transition from daylight saving time to standard time occurs on an operating system. Example: 59

Month when the transition from daylight saving time to standard time occurs on an operating system. Enumeration: 'february': 2, 'october': 10, 'march': 3, 'august': 8, 'september': 9, 'may': 5, 'january': 1, 'june': 6, 'april': 4, 'december': 12, 'july': 7, 'november': 11.

Name of the time zone being represented when standard time is in effect. Example: 'EST' (Eastern Standard Time)

Second of the StandardMinute when the transition from daylight saving time to standard time occurs on an operating system. Example: 59

Year when standard time is in effect. This property is not required. Example: 1997

The Drivers subcategory groups classes that represent virtual device drivers and system drivers for base services.

The Win32_DriverVXD WMI class represents a virtual device driver on a Windows computer system. A virtual device is a program that manages a system resource (such as a hardware device or installed software) so that more than one application can use the resource at the same time. Windows uses virtual devices to allow multitasking for Windows-based applications. The virtual devices work in conjunction with Windows to process interrupts, and carry out I/O operations for a given application without disrupting the execution of other applications. Most virtual devices manage a hardware device and many also manage or replace corresponding software such as ROM BIOS routines. A virtual device can contain the device-specific code needed to carry out actions on the device or it can rely on the other software to carry out these operations. In all cases, the virtual device keeps track of the state of the device for each application and ensures that the device is in the correct state whenever an application continues execution. Some virtual devices manage only installed software, such as an MS-DOS device driver or a Terminate and Stay Resident (TSR) program. Such virtual devices often contain code that either emulates the software or ensures that the software uses data that applies only to the currently running application. Virtual devices are sometimes used to improve the performance of installed software; the Intel-compatible microprocessors can execute the 32-bit code of a virtual device more efficiently than the 16-bit code of an MS-DOS device driver or TSR.

None

The value of this object uniquely identifies the instance entry for this class.

Internal identifier for this compilation of this software element.

Short description (one-line string) of the object.

Code set used by this software element.

Offset address to the driver's control procedures. The virtual machine manager calls this procedure to send control messages to the virtual device system. The system control messages direct the virtual device to carry out actions. An example of an action is initializing itself; another is notifying the virtual device of changes to virtual machines (such as a virtual machine is being created).

Description of the object.

Offset address to the device descriptor block (DDB) structure. The DDB contains information that the operating system uses to execute the procedures of the driver, including its location in the interrupt list, and other data to run and communicate with this VXD.

Manufacturer's identifier for this software element. Often this will be a stock-keeping unit (SKU) or a part number.

Object was installed. This property does not need a value to indicate that the object is installed.

Language edition of this software element. The language codes defined in ISO 639 should be used. Where the software element represents multi-lingual or international version of a product, the string 'multilingual' should be used.

Manufacturer of this software element.

Name used to identify this software element.

Manufacturer and operating system type for a software element when the TargetOperatingSystem property has a value of 1 (Other). Therefore, when the TargetOperatingSystem property has a value of Other, the OtherTargetOS property must have a non-null value. For all other values of TargetOperatingSystem, the OtherTargetOS property is to be NULL.

Offset address to the protected mode application programming interface for this VXD. These functions can give applications direct access to the features of the VXD.

Assigned serial number of this software element.

Number of installed services and device driver services provided by the operating system. Example: 1024

Identifier for this software element, designed to be used in conjunction with other keys to create a unique representation of this CIM_SoftwareElement instance.

State of a software element. Enumeration: 'executable': 3, 'running': 4, 'installable': 2, 'deployable': 1.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

Target operating system of the owning software element. The possible values for this property are as follows. Enumeration: 'dgux': 4, 'tandemNSK': 33, 'solaris': 29, 'win95': 16, 'u6000': 31, 'win98': 17, 'hpMPE': 54, 'dedicated': 59, 'ncr3000': 20, 'sunOS': 30, 'hpux': 8, 'beOS': 53, 'vse': 60, 'freeBSD': 42, 'linux': 36, 'aseries': 32, 'osf': 22, 'winnt': 18, 'scoUnixWare': 25, 'epoc': 49, 'unknown': 0, 'gnuHurd': 44, 'other': 1, 'mvs': 10, 'win3x': 15, 'os400': 11, 'windows2000': 58, 'os9': 45, 'netWare': 21, 'attunix': 3, 'os2': 12, 'qnx': 48, 'tandemNT': 34, 'openVMS': 7, 'msdos': 14, 'reliantUNIX': 24, 'wince': 19, 'rhapsody': 57, 'miNT': 52, 'inferno': 47, 'sequent': 27, 'nextStep': 55, 'tpf': 61, 'macos': 2, 'decnt': 5, 'vmESA': 39, 'aix': 9, 'machKernel': 46, 'scoOpenServer': 26, 'vxWorks': 51, 'javaVM': 13, 'irix': 28, 'xenix': 38, 'digitalUnix': 6, 'ixWorks': 50, 'dcOS': 23, 'bsdunix': 41, 'lynx': 37, 'interactiveUNIX': 40, 'bs2000': 35, 'palmPilot': 56, 'netBSD': 43.

Offset to the application programming interface for use under virtual 8086 mode. These functions can give applications direct access to the features of the VXD.

Version of the VXD driver. Example: '3.51'

The Win32_SystemDriver WMI class represents the system driver for a base service.

None

The value of this object uniquely identifies the instance entry for this class.

Service can be paused.

Service can be stopped.

Short description (one-line string) of the object.

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, the property allows all instances of this class and its subclasses to be uniquely identified.

Description of the object.

Service can create or communicate with windows on the desktop.

Display name of the service. This string has a maximum length of 256 characters. The name is case-preserved in the Service Control Manager. DisplayName comparisons are always case-insensitive. Constraints: Accepts the same value as the Name property. Example: 'Atdisk'

Severity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors are logged by the computer system. Value Meaning 'Ignore' User is not notified. 'Normal' User is notified. 'Severe' System is restarted wth the last-known-good configuration. 'Critical' System attempts to restart with a good configuration. 'Unknown' Cause of the failure is unknown.

Windows error code defining any problems encountered in starting or stopping the service. This property is set to ERROR_SERVICE_SPECIFIC_ERROR (1066) when the error is unique to the service represented by this class, and information about the error is available in the ServiceSpecificExitCode property. The service sets this value to NO_ERROR when running, and again upon normal termination.

Object was installed. This property does not need a value to indicate that the object is installed.

Unique identifier for the service which provides an indication of the functionality that is managed. This functionality is described in more detail in the object's Description property.

Fully-qualified path to the service binary file that implements the service. Example: '\SystemRoot\System32\drivers\afd.sys'

Service-specific error code for errors that occur while the service is either starting or stopping. The exit codes are defined by the service represented by this class. This value is only set when the ExitCode property value is ERROR_SERVICE_SPECIFIC_ERROR (1066).

Type of service provided to calling processes. Enumeration: 'ownProcess': 5, 'recognizerDriver': 4, 'adapter': 3, 'kernalDriver': 1, 'fileSystemDriver': 2, 'interactiveProcess': 7, 'shareProcess': 6.

Service has been started.

Severity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors are logged by the computer system. Value Meaning 'Ignore' User is not notified. 'Normal' User is notified. 'Severe' System is restarted with the last-known-good configuration. 'Critical' System attempts to restart with a good configuration. 'Unknown' Cause of the failure is unknown.

Account name under which the service runs. Depending on the service type, the account name may be in the form of DomainName\Username. The service process will be logged using one of these two forms when it runs. If the account belongs to the built-in domain, .\Username can be specified. If NULL is specified, the service will be logged on as the LocalSystem account. For kernel or system level drivers, StartName contains the driver object name (that is, \FileSystem\Rdr or \Driver\Xns) which the input and output (I/O) system uses to load the device driver. Additionally, if NULL is specified, the driver runs with a default object name created by the I/O system based on the service name. Example: 'DWDOM\Admin' Windows XP: You can use UPN format (Username@DomainName) to specify the StartName.

Current state of the base service. Enumeration: 'startPending': 2, 'continuePending': 5, 'unknown': 8, 'stopPending': 3, 'pausePending': 6, 'paused': 7, 'running': 4, 'stopped': 1.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

Type name of the system that hosts this service.

Name of the system that hosts this service.

Unique tag value for this service in the group. A value of 0 indicates that the service has not been assigned a tag. A tag can be used for ordering service startup within a load order group by specifying a tag order vector in the registry located at: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control \GroupOrderList. Tags are only evaluated for Kernel Driver and File System Driver start type services that have Boot or System start modes.

The File System subcategory groups classes that represent the way a hard disk is logically arranged. This includes the type of file system used, the directory structure, and way the disk is partitioned.

The Win32_DiskPartition WMI class represents the capabilities and management capacity of a partitioned area of a physical disk on a Windows system. Example: Disk #0, Partition #1.

None

The value of this object uniquely identifies the instance entry for this class.

Media access available. Enumeration: 'writable': 2, 'unknown': 0, 'writeOnce': 4, 'readable': 1, 'readwriteSupported': 3.

Availability and status of the device. Power Save - Unknown indicates that the device is known to be in a power save mode, but its exact status is unknown; Power Save - Low Power Mode indicates that the device is in a power save state but still functioning, and may exhibit degraded performance; Power Save - Standby indicates that the device is not functioning but could be brought to full power quickly; and Power Save - Warning indicates that the device is in a warning state, though also in a power save mode. Enumeration: 'powerSaveStandby': 15, 'paused': 18, 'installError': 12, 'notConfigured': 20, 'quiesced': 21, 'unknown': 2, 'powerSaveUnknown': 13, 'notInstalled': 11, 'offDuty': 9, 'inTest': 5, 'powerSaveWarning': 17, 'notApplicable': 6, 'powerOff': 7, 'other': 1, 'notReady': 19, 'runningFullPower': 3, 'offLine': 8, 'warning': 4, 'degraded': 10, 'powerSaveLowPowerMode': 14, 'powerCycle': 16.

Size in bytes of the blocks which form this storage extent. If unknown or if a block concept is not valid (for example, for aggregate extents, memory or logical disks), enter a 1.

Computer may be booted from this partition.

Partition is the active partition. The operating system uses the active partition when booting from a hard disk.

Short description (one-line string) of the object.

Windows Configuration Manager error code. Enumeration: 'reinstallDrivers': 18, 'registryCorrupted': 20, 'needResource': 5, 'unknownResourceType': 17, 'notConfigured': 1, 'driverLoaderMissing': 8, 'driversNotInstalled': 28, 'systemFailuer2': 23, 'lowResource': 3, 'cannotStart': 10, 'deviceProblem': 24, 'reenumerationProblem': 15, 'invalidLogConfiguration': 27, 'cannotLoad': 2, 'deviceDisabled': 22, 'restartComputer': 14, 'cannotLoadDrivers': 31, 'settingUpDevice2': 26, 'bootConflicts': 6, 'deviceFailed': 11, 'missingResources': 29, 'workingProperly': 0, 'systemFailure': 21, 'driverCorrupted': 4, 'cannotFilter': 7, 'noFreeResources': 12, 'failedVXDloader': 19, 'cannotIdentify': 16, 'conflictIRQ': 30, 'cannotVerifyResources': 13, 'settingUpDevice': 25, 'resourceIncorrect': 9.

Device is using a user-defined configuration.

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, the property allows all instances of this class and its subclasses to be uniquely identified.

Description of the object.

Unique identifier of the disk drive and partition, from the rest of the system.

Index number of the disk containing this partition. Example: 0

Error reported in LastErrorCode is now cleared.

Information about the error recorded in LastErrorCode, and information on any corrective actions that may be taken.

Type of error detection and correction supported by this storage extent.

Number of hidden sectors in the partition. Example: 63

Index number of the partition. Example: 1

Object was installed. This property does not need a value to indicate that the object is installed.

Last error code reported by the logical device.

Label by which the object is known. When subclassed, the property can be overridden to be a key property.

Total number of consecutive blocks, each block the size of the value contained in the BlockSize property, which form this storage extent. Total size of the storage extent can be calculated by multiplying the value of the BlockSize property by the value of this property. If the value of BlockSize is 1, this property is the total size of the storage extent.

Windows Plug and Play device identifier of the logical device. Example: '*PNP030b'

Specific power-related capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled but the exact feature set is unknown or the information is unavailable. Power Saving Modes Entered Automatically indicates that a device can change its power state based on usage or other criteria. Power State Settable indicates that the SetPowerState method is supported. Power Cycling Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5 (Power Cycle). Timed Power On Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5 (Power Cycle) and Time set to a specific date and time, or interval, for power-on. Value Meaning 0 Unknown 1 Not Supported 2 Disabled 3 Enabled 4 Power Saving Modes Entered Automatically 5 Power State Settable 6 Power Cycling Supported 7 Timed Power On Supported

Device can be power-managed (can be put into suspend mode, and so on). The property does not indicate that power management features are currently enabled, only that the logical device is capable of power management.

Primary partition.

Description of the media and/or its use.

Partition information has changed. When you change a partition (with IOCTL_DISK_SET_DRIVE_LAYOUT), the system uses this property to determine which partitions have changed and need their information rewritten. If TRUE, the partition needs to be rewritten.

Total size of the partition. Example: 1059045376

Starting offset (in bytes) of the partition. Example: 32256

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

State of the logical device. If this property does not apply to the logical device, the value 5 (Not Applicable) should be used. Enumeration: 'disabled': 4, 'unknown': 2, 'other': 1, 'enabled': 3, 'notApplicable': 5.

Creation class name of the scoping system.

Name of the scoping system.

Type of the partition. Values are: 'Unused' '12-bit FAT' 'Xenix Type 1' 'Xenix Type 2' '16-bit FAT' 'Extended Partition' 'MS-DOS V4 Huge' 'Installable File System' 'PowerPC Reference Platform' 'UNIX' 'NTFS' 'Win95 w/Extended Int 13' 'Extended w/Extended Int 13' 'Logical Disk Manager' 'Unknown'

The Win32_LogicalDisk WMI class represents a data source that resolves to an actual local storage device on a Windows system.

None

The value of this object uniquely identifies the instance entry for this class.

Type of media access available. This property is inherited from CIM_StorageExtent. Enumeration: 'writable': 2, 'unknown': 0, 'writeOnce': 4, 'readable': 1, 'readWriteSupported': 3.

Availability and status of the device. Power Save - Unknown indicates that the device is known to be in a power save mode, but its exact status is unknown; Power Save - Low Power Mode indicates that the device is in a power save state but still functioning, and may exhibit degraded performance; Power Save - Standby indicates that the device is not functioning but could be brought to full power quickly; and Power Save - Warning indicates that the device is in a warning state, though also in a power save mode. This property is inherited from CIM_LogicalDevice. Enumeration: 'powerSaveStandby': 15, 'paused': 18, 'installError': 12, 'notConfigured': 20, 'quiesced': 21, 'unknown': 2, 'powerSaveUnknown': 13, 'notInstalled': 11, 'offDuty': 9, 'inTest': 5, 'powerSaveWarning': 17, 'notApplicable': 6, 'powerOff': 7, 'other': 1, 'notReady': 19, 'runningFullPower': 3, 'offLine': 8, 'warning': 4, 'degraded': 10, 'powerSaveLowPowerMode': 14, 'powerCycle': 16.

Size in bytes of the blocks that form this storage extent. If unknown or if a block concept is not valid (for example, for aggregate extents, memory or logical disks), enter a 1. This property is inherited from CIM_StorageExtent.

Short description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.

If TRUE, the logical volume exists as a single compressed entity, such as a DoubleSpace volume. If file based compression is supported (such as on NTFS), this property will be FALSE.

Windows Configuration Manager error code. This property is inherited from CIM_LogicalDevice. Enumeration: 'reinstallDrivers': 18, 'registryCorrupted': 20, 'needResource': 5, 'unknownResourceType': 17, 'notConfigured': 1, 'driverLoaderMissing': 8, 'driversNotInstalled': 28, 'systemFailuer2': 23, 'lowResource': 3, 'cannotStart': 10, 'deviceProblem': 24, 'reenumerationProblem': 15, 'invalidLogConfiguration': 27, 'cannotLoad': 2, 'deviceDisabled': 22, 'restartComputer': 14, 'cannotLoadDrivers': 31, 'settingUpDevice2': 26, 'bootConflicts': 6, 'deviceFailed': 11, 'missingResources': 29, 'workingProperly': 0, 'systemFailure': 21, 'driverCorrupted': 4, 'cannotFilter': 7, 'noFreeResources': 12, 'failedVXDloader': 19, 'cannotIdentify': 16, 'conflictIRQ': 30, 'cannotVerifyResources': 13, 'settingUpDevice': 25, 'resourceIncorrect': 9.

If TRUE, the device is using a user-defined configuration. This property is inherited from CIM_LogicalDevice.

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, the property allows all instances of this class and its subclasses to be uniquely identified. This property is inherited from CIM_LogicalDevice.

Description of the object. This property is inherited from CIM_ManagedSystemElement.

Unique identifier of the logical disk from other devices on the system. This property is inherited from CIM_LogicalDevice.

Numeric value corresponding to the type of disk drive this logical disk represents. Enumeration: 'ramDisk': 6, 'unknown': 0, 'networkDrive': 4, 'noRootDirectory': 1, 'removableDisk': 2, 'compactDisc': 5, 'localDisk': 3.

If TRUE, the error reported in LastErrorCode is now cleared. This property is inherited from CIM_LogicalDevice.

More information about the error recorded in LastErrorCode, and information on any corrective actions that may be taken. This property is inherited from CIM_LogicalDevice.

Type of error detection and correction supported by this storage extent. This property is inherited from CIM_StorageExtent.

File system on the logical disk. Example: 'NTFS'

Space available on the logical disk. This property is inherited from CIM_LogicalDisk.

Date and time the object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.

Last error code reported by the logical device. This property is inherited from CIM_LogicalDevice.

Maximum length of a filename component supported by the Windows drive. A filename component is that portion of a filename between backslashes. The value can be used to indicate that long names are supported by the specified file system. For example, for a FAT file system supporting long names, the function stores the value 255, rather than the previous 8.3 indicator. Long names can also be supported on systems that use the NTFS file system. Example: 255

Type of media currently present in the logical drive. This value will be one of the values of the MEDIA_TYPE enumeration defined in Winioctl.h. The value may not be exact for removable drives if currently there is no media in the drive. Value Meaning 0 Unknown Format is unknown 1 F5_1Pt2_512 51/4-Inch Floppy Disk - 1.2Mb - 512 bytes/sector 2 F3_1Pt44_512 31/2-Inch Floppy Disk - 1.44Mb -512 bytes/sector 3 F3_2Pt88_512 31/2-Inch Floppy Disk - 2.88Mb - 512 bytes/sector 4 F3_20Pt8_512 31/2-Inch Floppy Disk - 20.8Mb - 512 bytes/sector 5 F3_720_512 31/2-Inch Floppy Disk - 720Kb - 512 bytes/sector 6 F5_360_512 51/4-Inch Floppy Disk - 360Kb - 512 bytes/sector 7 F5_320_512 51/4-Inch Floppy Disk - 320Kb - 512 bytes/sector 8 F5_320_1024 51/4-Inch Floppy Disk - 320Kb - 1024 bytes/sector 9 F5_180_512 51/4-Inch Floppy Disk - 180Kb - 512 bytes/sector 10 F5_160_512 51/4-Inch Floppy Disk - 160Kb - 512 bytes/sector 11 Removable media other than floppy 12 Fixed hard disk media 13 F3_120M_512 31/2-Inch Floppy Disk - 120Mb - 512 bytes/sector 14 F3_640_512 31/2-Inch Floppy Disk - 640Kb - 512 bytes/sector 15 F5_640_512 51/4-Inch Floppy Disk - 640Kb - 512 bytes/sector 16 F5_720_512 51/4-Inch Floppy Disk - 720Kb - 512 bytes/sector 17 F3_1Pt2_512 31/2-Inch Floppy Disk - 1.2Mb - 512 bytes/sector 18 F3_1Pt23_1024 31/2-Inch Floppy Disk - 1.23Mb - 1024 bytes/sector 19 F5_1Pt23_1024 51/4-Inch Floppy Disk - 1.23Mb - 1024 bytes/sector 20 F3_128Mb_512 31/2-Inch Floppy Disk - 128Mb - 512 bytes/sector 21 F3_230Mb_512 31/2-Inch Floppy Disk - 230Mb - 512 bytes/sector 22 F8_256_128 8-Inch Floppy Disk - 256Kb - 128 bytes/sector

Label by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElement.

Total number of consecutive blocks, each block the size of the value contained in the BlockSize property, which form this storage extent. Total size of the storage extent can be calculated by multiplying the value of the BlockSize property by the value of this property. If the value of BlockSize is 1, this property is the total size of the storage extent. This property is inherited from CIM_StorageExtent.

Windows Plug and Play device identifier of the logical device. This property is inherited from CIM_LogicalDevice. Example: '*PNP030b'

Array of the specific power-related capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled but the exact feature set is unknown or the information is unavailable. Power Saving Modes Entered Automatically indicates that a device can change its power state based on usage or other criteria. Power State Settable indicates that the SetPowerState method is supported. Power Cycling Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5 (Power Cycle). Timed Power On Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5 (Power Cycle) and Time set to a specific date and time, or interval, for power-on. This property is inherited from CIM_LogicalDevice. Value Meaning 0 Unknown 1 Not Supported 2 Disabled 3 Enabled 4 Power Saving Modes Entered Automatically 5 Power State Settable 6 Power Cycling Supported 7 Timed Power On Supported

If TRUE, the device can be power-managed (can be put into suspend mode, and so on). The property does not indicate that power management features are currently enabled, only that the logical device is capable of power management. This property is inherited from CIM_LogicalDevice.

Network path to the logical device.

Free-form string describing the media and/or its use. This property is inherited from CIM_StorageExtent.

Indicates that quota management is not enabled (TRUE) on this system. This property is new for Windows XP.

Indicates that the quota management was used but has been disabled (TRUE). Incomplete refers to the information left in the file system after quota management was disabled. This property is new for Windows XP.

Indicates that the file system is in the active process of compiling information and setting the disk up for quota management. This property is new for Windows XP.

Size of the disk drive. This property is inherited from CIM_LogicalDisk.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither 'OK' nor in one of the other states. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

State of the logical device. If this property does not apply to the logical device, the value 5 (Not Applicable) should be used. This property is inherited from CIM_LogicalDevice. Enumeration: 'disabled': 4, 'unknown': 2, 'other': 1, 'enabled': 3, 'notApplicable': 5.

If TRUE, this volume supports disk quotas. This property is new for Windows XP.

If TRUE, the logical disk partition supports file based compression, such as is the case with NTFS file system. This property is FALSE, when the Compressed property is TRUE.

Value of the scoping computer's CreationClassName property. This property is inherited from CIM_LogicalDevice.

Name of the scoping system. This property is inherited from CIM_LogicalDevice.

If TRUE, the disk requires ChkDsk to be run at next boot up. This property is only applicable to those instances of logical disk that represent a physical disk in the machine. It is not applicable to mapped logical drives. This property is new for Windows XP.

Volume name of the logical disk. Constraints: maximum 32 characters.

Volume serial number of the logical disk. Constraints: maximum 11 characters. Example: 'A8C3-D032'

The Win32_MappedLogicalDisk WMI class represents network storage devices that are mapped as logical disks on the computer system.

None

The value of this object uniquely identifies the instance entry for this class.

Device access state. This property is inherited from CIM_StorageExtent. Enumeration: 'writeable': 2, 'unknown': 0, 'writeOnce': 4, 'readable': 1, 'readWriteSupported': 3.

Availability and status of the device. Power Save - Unknown indicates that the device is known to be in a power save mode, but its exact status is unknown; Power Save - Low Power Mode indicates that the device is in a power save state but still functioning, and may exhibit degraded performance; Power Save - Standby indicates that the device is not functioning but could be brought to full power quickly; and Power Save - Warning indicates that the device is in a warning state, though also in a power save mode. This property is inherited from CIM_LogicalDevice. Enumeration: 'powerSaveStandby': 15, 'installError': 12, 'unknown': 2, 'powerSaveUnknown': 13, 'notInstalled': 11, 'offDuty': 9, 'inTest': 5, 'powerSaveWarning': 17, 'notApplicable': 6, 'powerOff': 7, 'other': 1, 'runningFullPower': 3, 'offLine': 8, 'warning': 4, 'degraded': 10, 'powerSaveLowPowerMode': 14, 'powerCycle': 16.

Size, in bytes, of the blocks which form this storage extent. If this concept is not valid for the device type, the value is 1. This property is inherited from CIM_StorageExtent.

Short description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.

If TRUE, the file is compressed. This property is inherited from CIM_ManagedSystemElement.

Windows Configuration Manager error code. This property is inherited from CIM_LogicalDevice. Enumeration: 'reinstallDrivers': 18, 'registryCorrupted': 20, 'needResource': 5, 'unknownResourceType': 17, 'notConfigured': 1, 'driverLoaderMissing': 8, 'driversNotInstalled': 28, 'systemFailuer2': 23, 'lowResource': 3, 'cannotStart': 10, 'deviceProblem': 24, 'reenumerationProblem': 15, 'invalidLogConfiguration': 27, 'cannotLoad': 2, 'deviceDisabled': 22, 'restartComputer': 14, 'cannotLoadDrivers': 31, 'settingUpDevice2': 26, 'bootConflicts': 6, 'deviceFailed': 11, 'missingResources': 29, 'workingProperly': 0, 'systemFailure': 21, 'driverCorrupted': 4, 'cannotFilter': 7, 'noFreeResources': 12, 'failedVXDloader': 19, 'cannotIdentify': 16, 'conflictIRQ': 30, 'cannotVerifyResources': 13, 'settingUpDevice': 25, 'resourceIncorrect': 9.

If TRUE, the device is using a user-defined configuration. This property is inherited from CIM_LogicalDevice.

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, the property allows all instances of this class and its subclasses to be uniquely identified. This property is inherited from CIM_LogicalDevice.

Description of the object. This property is inherited from CIM_ManagedSystemElement.

Unique identifier of the memory array. This property is inherited from CIM_LogicalDevice. Example: 'Memory Array 1'

If TRUE, the error reported in LastErrorCode is now cleared. This property is inherited from CIM_LogicalDevice.

More information about the error recorded in LastErrorCode, and information on any corrective actions that may be taken. This property is inherited from CIM_LogicalDevice.

Types of error checking used by the hardware. This property is inherited from CIM_StorageExtent.

File system on the logical disk. Example: 'NTFS'

Space available on the logical disk. This property is inherited from CIM_LogicalDisk.

Date and time when the object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.

Last error code reported by the logical device. This property is inherited from CIM_LogicalDevice.

Contains the maximum length of a filename component supported by the Windows drive. Example: 255

Object label. This property is inherited from CIM_ManagedSystemElement.

Total number of consecutive blocks, each block the size of the value contained in the BlockSize property, which form this storage extent. Total size of the storage extent can be calculated by multiplying the value of the BlockSize property by the value of this property. If the value of BlockSize is 1, this property is the total size of the storage extent. This property is inherited from CIM_StorageExtent.

Windows Plug and Play device identifier of the logical device. This property is inherited from CIM_LogicalDevice. Example: '*PNP030b'

Array of the specific power-related capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled but the exact feature set is unknown or the information is unavailable. Power Saving Modes Entered Automatically indicates that a device can change its power state based on usage or other criteria. Power State Settable indicates that the SetPowerState method is supported. Power Cycling Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5 (Power Cycle). Timed Power On Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5 (Power Cycle) and Time set to a specific date and time, or interval, for power-on. This property is inherited from CIM_LogicalDevice. Enumeration: 'timedPowerOnSupported': 7, 'unknown': 0, 'enabled': 3, 'powerSavingModesEnterAutomatic': 4, 'disabled': 2, 'powerCyclingSupported': 6, 'powerStateSettable': 5, 'notSupported': 1.

If TRUE, the device can be power-managed (can be put into suspend mode, and so on). The property does not indicate that power management features are currently enabled, only that the logical device is capable of power management. This property is inherited from CIM_LogicalDevice.

Network path name to the logical device.

Free-form string describing the media and/or its use. This property is inherited from CIM_StorageExtent.

If TRUE, quota management is not enabled for this volume.

If TRUE, quota management was used but has been disabled. Incomplete refers to the information left in the file system after quota management has been disabled.

If TRUE, the file system is setting up for quota management.

ID of the user's session. The user may be connected using a local login or a terminal session.

Size of the logical disk.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

State of the logical device. If this property does not apply to the logical device, the value 5 (Not Applicable) should be used. This property is inherited from CIM_LogicalDevice. Enumeration: 'disabled': 4, 'unknown': 2, 'other': 1, 'enabled': 3, 'notApplicable': 5.

If TRUE, this volume supports disk quotas.

If TRUE, the logical disk partition supports file based compression, such as is the case with NTFS. This property is FALSE, when the Compressed property is TRUE.

Value of the scoping computer's CreationClassName property. This property is inherited from CIM_LogicalDevice.

Name of the scoping system. This property is inherited from CIM_LogicalDevice.

Volume name of the logical disk. This property value may have a maximum of 32 characters.

Volume serial number of the logical disk. This property value may have a maximum of 11 characters. This property is inherited from CIM_LogicalDevice. Example: 'A8C3-D032'

The Win32_QuotaSetting WMI class contains setting information for disk quotas on a volume. This class is new for Windows XP.

None

The value of this object uniquely identifies the instance entry for this class.

Short description of the object a one line string. This property is inherited from CIM_Setting.

Default limit set for quotas on this specific volume.

Default warning limit set for quotas on this specific volume.

Comment that describes the link. This property is inherited from CIM_Setting.

If TRUE, events are written to the event log when quotas are exceeded.

Name of a CIM_Setting object.

Level of quota management set for this volume. Enumeration: 'disabled': 0, 'enforced': 2, 'tracked': 1.

Name of the volume where disk quotas are located. It can be volume name, volume path (such as D:\\), or it can be the unique volume name (such as '\\\\?Volume{GUID}\\.').

If TRUE, events are written to the event log when warnings are exceeded.

The Win32_Volume class represents an area of storage on a hard disk. The class returns local volumes that are formatted, unformatted, mounted, or offline. A volume is formatted by using a file system, such as FAT or NTFS, and might have a drive letter assigned to it. One hard disk can have multiple volumes, and volumes can span multiple physical disks. The Win32_Volume class does not support disk drive management.

None

The value of this object uniquely identifies the instance entry for this class.

If true, the volume is mounted to the file system automatically when the first I/O is issued. If false, the volume is not mounted until explicitly mounted by using the Mount method, or by adding a drive letter or mount point.

Size of the volume in bytes.

If true the volume exists as one compressed entity, such as a DoubleSpace volume. If file-based compression is supported, such as the NTFS file system, this property is false.

Unique identifier for the volume on this system.

If true, the Chkdsk method is automatically run by the system at the next boot up.

Drive letter assigned to a volume. This property is NULL for volumes without drive letters.

Numeric value that corresponds to the type of disk drive that this logical disk represents. Enumeration: 'ramDisk': 6, 'unknown': 0, 'networkDrive': 4, 'compactDisk': 5, 'removableDisk': 2, 'noRootDirectory': 1, 'localDisk': 3.

File system on the logical disk. Example: NTFS

Number of bytes of available space on the volume.

If true, context indexing is enabled.

Volume name of the logical disk. This property is null for volumes without a label. For FAT, FAT32 systems the maximum length is 11 characters. For NTFS file systems the maximum length is 32 characters.

Maximum length, in characters, of a filename component supported by a Windows drive. A filename component is the portion of a filename between backslashes. This value can be used to indicate that long names are supported by the file system. For example, for a FAT file system that supports long names, the property stores the value 255 not the previous 8.3 indicator. Long names can be supported on systems that use the NTFS file system. Example: 255

If true, quota management is enabled for this volume.

If true, quota management was used but is disabled. Incomplete refers to the information left in the file system after quota management is disabled.

If true, the file system is in the process of compiling information and setting the disk up for quota management.

Serial number of the volume. Example: A8C3D032

If true, the volume supports disk quotas.

If true, the volume supports file-based compression like the NTFS file system.

The Job Objects subcategory groups classes that represent classes that provide the means of instrumenting named job objects. An unnamed job object cannot be instrumented.

The Win32_NamedJobObject WMI class represents a kernel object that is used to group processes for controlling the life and resources of the processes within the job object. Only the job objects that are named are instrumented. This class is new for Windows XP.

None

The value of this object uniquely identifies the instance entry for this class.

Restrictions on a job regarding the user interface. Enumeration: 'writeClipboard': 128, 'displaySettings': 2, 'systemParameters': 64, 'readClipboard': 32, 'desktop': 1, 'handles': 16, 'exitWindows': 4, 'globalAtoms': 8.

Short description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.

Number that identifies a job object. Because they are kernel objects, job object names are case sensitive. However, Windows Management Instrumentation (WMI) keys are case insensitive and must be decorated to distinguish case. To indicate a capital letter, precede the letter by using a backslash. For example, 'A' and 'a' are lowercase and '\A' and '\a' are uppercase. This property overrides the CollectionID property in CIM_CollectionofMSEs.

Description of the object. This property is inherited from CIM_ManagedSystemElement.

The Win32_NamedJobObjectActgInfo WMI class class represents the I/O accounting information for a job object. This class is new for Windows XP.

None

The value of this object uniquely identifies the instance entry for this class.

Total number of processes associated with a job. When a process is associated with a job, but the association fails because of a limit violation, the value is temporarily incremented. When the terminated process exits and all references to the process are released, the value is decremented.

Short description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.

Description of the object. This property is inherited from CIM_StatisticalInformation.

Label by which the statistic or metric is known. When subclassed, the property can be overridden to be a key property. This property overrides the Name property in CIM_StatisticalInformation.

Number of I/O operations performed other than read and write operations by all processes that have been associated with the job including all processes currently associated with the job.

Number of bytes transferred during operations other than read and write by all processes that have been associated with the job including all processes currently associated with the job.

Peak memory in kilobyte usage of all processes associated with the job.

The most process memory in kilobytes used by any process ever associated with the job.

Number of read operations performed by all processes that have ever been associated with the job, in addition to all processes currently associated with the job.

Number of bytes read by all processes that have been associated with the job including all processes currently associated with the job.

Total amount of kernel-mode execution time, in 100 nanosecond units, for all active processes associated with the job (and all terminated processes no longer associated with the job) after the last call that set a per-job kernel-mode time limit. This property is set to 0 (zero) when a job is created, and each time a per-job kernel-mode time limit is established.

Total amount of user-mode execution time, in 100 nanosecond units, for all active processes associated with the job (and all terminated processes no longer associated with the job) since the last call that set a per-job user-mode time limit. This property is set to 0 (zero) when a job is created, and each time a per-job user-mode time limit is established

Total amount of kernel-mode execution time, in 100 nanosecond units, for all active processes associated with the job, as well as all terminated processes no longer associated with the job.

Total number of page faults encountered by all active processes associated with the job, as well as all terminated processes no longer associated with the job.

Total number of processes associated with the job during its lifetime, including those that are terminated. For example, when a process is associated with a job, but the association fails because of a limit violation, the value is incremented.

Total number of processes terminated because of a limit violation.

Total amount of user-mode execution time, in 100 nanosecond units, for all active processes associated with a job, and all terminated processes not associated with a job.

Number of write operations performed by all processes that have been associated with a job, and all processes currently associated with the job.

Number of bytes written by all processes that have been associated with a job, and all processes currently associated with a job.

The Win32_NamedJobObjectLimitSetting WMI class represents the limit settings for a job object. This class is new for Windows XP.

None

The value of this object uniquely identifies the instance entry for this class.

Active process limit for a job. If associating a process with a job causes the active process count to exceed the limit, the process is terminated and the association fails. This property is ignored unless the LimitFlags property specifies the Active Process Limit value.

Processor affinity for all processes associated with a job. The affinity of each thread is set to this value, but threads are free to set the affinity subsequently, when it is a subset of the specified affinity mask. Processes cannot set an affinity mask. This property is ignored unless LimitFlags specifies the Limit Affinity value.

Short description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.

Description of the object. This property is inherited from CIM_ManagedSystemElement.

Per-job memory limit in kilobytes. This property is ignored unless LimitFlags specifies the Limit Job Memory value.

Bitmap that represents the job limits. One or more of the limits can be in effect at the same time. Enumeration: 'limitProcessMemory': 256, 'limitJobMemory': 512, 'limitDieOnUnhandledException': 1024, 'silentBreakawayOK': 4096, 'limitPreserveJobTime': 64, 'limitBreakawayOK': 2048, 'limitPriorityClass': 32, 'activeProcessLimit': 8, 'limitJobTime': 4, 'limitSchedulingClass': 128, 'limitWorkingSet': 1, 'limitProcessTime': 2, 'limitAffinity': 16.

Maximum working set size for all processes associated with a job. This property is ignored unless LimitFlags specifies the Limit Working Set value.

Minimum working set size for all processes associated with a job. This property is ignored unless LimitFlags specifies the Limit Working Set value.

Per-job user mode execution time limit, in 100 nanosecond units. The system adds the current time of the processes associated with the job to this limit. For example, if you set this limit to 1 minute, and the job has a process that has accumulated 5 minutes of user mode time, the limit actually enforced is 6 minutes.

Per-process user mode execution time limit, in 100-nanosecond units. This property is ignored unless LimitFlags specifies Limit Process Time. The system periodically checks to determine whether or not each process associated with the job has accumulated more user-mode time than the set limit. If it has, the process is terminated.

Priority class for all processes associated with the job. Processes and threads cannot modify their priority class. This property is ignored unless LimitFlags specifies the Limit Priority value.

Per-process memory limit in kilobytes. This property is ignored unless LimitFlags specifies the Limit Process Memory value.

Scheduling class for all processes associated with the job. The valid values are 0 to 9. Use 0 (zero) for the least favorable scheduling class relative to other threads, and 9 for the most favorable scheduling class relative to other threads. This property is ignored unless LimitFlags specifies the Limit Scheduling Class value.

Job object limit setting instance. Because they are kernel objects, job object names are case-sensitive. However, Windows Management Instrumentation (WMI) keys are case-insensitive and must be decorated to distinguish case. To indicate a capital letter, precede the letter by a backslash. For example, 'A' and 'a' are lowercase and '\A' and '\a' are uppercase.

The Memory and Page files subcategory groups classes that represent page file configuration settings.

The Win32_PageFile WMI class represents the file used for handling virtual memory file swapping on a Win32 system. This class has been deprecated.

None

The value of this object uniquely identifies the instance entry for this class.

List of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under Windows NT and Windows 2000. On Windows 98 and on Windows NT/Windows 2000 FAT volumes, the FULL_ACCESS value, 0xFFFFFFFF hex or 4294967295 decimal, is returned instead, indicating no security has been set on the object. Value Meaning 0 FILE_LIST_DIRECTORY Grants the right to read data from the file. For a directory, this value grants the right to list the contents of the directory. 1 FILE_ADD_FILE Grants the right to write data to the file. For a directory, this value grants the right to create a file in the directory. 2 FILE_ADD_SUBDIRECTORY Grants the right to append data to the file. For a directory, this value grants the right to create a subdirectory. 3 FILE_READ_EA Grants the right to read extended attributes. 4 FILE_WRITE_EA Grants the right to write extended attributes. 5 FILE_TRAVERSE Grants the right to execute a file. For a directory, the directory can be traversed. 6 FILE_DELETE_CHILD Grants the right to delete a directory and all the files it contains (its children), even if the files are read-only. 7 FILE_READ_ATTRIBUTES Grants the right to read file attributes. 8 FILE_WRITE_ATTRIBUTES Grants the right to change file attributes. 16 DELETE Grants delete access. 17 READ_CONTROL Grants read access to the security descriptor and owner. 18 WRITE_DAC Grants write access to the discretionary ACL. 19 WRITE_OWNER Assigns the write owner. 20 SYNCHRONIZE Synchronizes access and allows a process to wait for an object to enter the signaled state.

File should be archived.

Short description (one-line string) of the object.

File is compressed.

Algorithm or tool used to compress the logical file. If it is not possible (or not desired) to describe the compression scheme (perhaps because it is not known), use the following words: 'Unknown' to represent that it is not known whether the logical file is compressed or not; 'Compressed' to represent that the file is compressed but either its compression scheme is not known or not disclosed; and 'Not Compressed' to represent that the logical file is not compressed.

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, the property allows all instances of this class and its subclasses to be uniquely identified.

File creation date.

Class of the computer system.

Name of the computer system.

Description of the object.

Drive letter (including colon) of the file. Example: 'c:'

DOS-compatible file name for this file. Example: 'c:\progra~1'

File is encrypted.

Algorithm or tool used to encrypt the logical file. If it is not possible (or not desired) to describe the encryption scheme (perhaps for security reasons), use the following words: 'Unknown' to represent that it is not known whether the logical file is encrypted or not; 'Encrypted' to represent that the file is encrypted but either its encryption scheme is not known or not disclosed; and 'Not Encrypted' to represent that the logical file is not encrypted.

File extension (without the dot). Examples: 'txt', 'mof', 'mdb'.

Name (without extension) of the file. Example: 'autoexec'

Size of the file (in bytes).

File type (indicated by the Extension property).

Space available in the paging file. The operating system can enlarge the paging file as necessary up to the limit imposed by the user. This property shows the difference between the size of current committed memory and the current size of the paging file; it does not show the largest possible size of the paging file.

Class of the file system.

Name of the file system.

File is hidden.

Initial size of the page file.

Object was installed. This property does not need a value to indicate that the object is installed.

Number of 'file opens' that are currently active against the file.

File was last accessed.

File was last modified.

Manufacturer name from version resource, if one is present.

Maximum size of the page file as set by the user. The operating system will not allow the page file to exceed this limit.

Name of the page file. Example: 'C:\PAGEFILE.SYS'

Path of the file. This includes leading and trailing backslashes. Example: '\windows\system\'

File can be read.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

File is a system file.

Version name from version resource, if one is present.

File can be written.

The Win32_PageFileSetting WMI class represents the settings of a page file. Information contained within objects instantiated from this class specify the page file parameters used when the file is created at system startup. The properties in this class can be modified and deferred until startup. These settings are different from the run-time state of a page file expressed through the associated class Win32_PageFileUsage. To create an instance of this class, enable the SeCreatePagefilePrivilege privilege. For more information, see Windows NT/Windows 2000 Privilege Strings and Executing Privileged Operations.

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the CIM_Setting object.

Description of the CIM_Setting object.

Initial size of the page file. Example: 139

Maximum size of the page file. Example: 178

Path and file name of the page file. Example: 'C:\PAGEFILE.SYS'

Identifier by which the CIM_Setting object is known.

The Win32_PageFileUsage WMI class represents the file used for handling virtual memory file swapping on a Win32 system. Information contained within objects instantiated from this class specify the run-time state of the page file.

None

The value of this object uniquely identifies the instance entry for this class.

Actual amount of disk space allocated for use with this page file. This value corresponds to the range established in Win32_PageFileSetting under the InitialSize and MaximumSize properties, set at system startup. Example: 178

Short description of the object a one-line string.

Amount of disk space currently used by the page file.

Description of the object.

Object was installed. This property does not need a value to indicate that the object is installed.

Name of the page file. Example: 'C:\PAGEFILE.SYS'

Highest use page file.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

Windows XP, Windows Server 2003: If true, a temporary page file has been created, usually because there is no permanent page file on the current computer system.

The class in the Multimedia Audio/Visual subcategory represents properties of the audio or video codec installed on the computer system.

The Win32_CodecFile WMI class represents the audio or video codec installed on the computer system. Codecs convert one media format type to another, typically a compressed format to an uncompressed format. The name codec is derived from a combination of compress and decompress. For example, a codec can convert a compressed format such as MS-ADPCM to an uncompressed format such as PCM, which most audio hardware can play directly.

None

The value of this object uniquely identifies the instance entry for this class.

Bitmap list of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under Windows NT and Windows 2000. On Windows 98 and on Windows NT/Windows 2000 FAT volumes, the FULL_ACCESS value is returned instead, indicating no security has been set on the object. This property is inherited from CIM_LogicalFile. Enumeration: 'fileREADATTRIBUTES': 7, 'fileDELETECHILD': 6, 'fileADDFILE': 1, 'fileWRITEEA': 4, 'readCONTROL': 17, 'fileADDSUBDIRECTORY': 2, 'fileTRAVERSE': 5, 'synchronize': 20, 'fileWRITEATTRIBUTES': 8, 'writeOWNER': 19, 'fileREADEA': 3, 'writeDAC': 18, 'fileLISTDIRECTORY': 0, 'delete': 16.

File should be archived. This property is inherited from CIM_LogicalFile.

Short description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.

File is compressed. This property is inherited from CIM_LogicalFile.

Algorithm or tool used to compress the logical file. If it is not possible (or not desired) to describe the compression scheme (perhaps because it is not known), use the following words: 'Unknown' to represent that it is not known whether the logical file is compressed or not; 'Compressed' to represent that the file is compressed but either its compression scheme is not known or not disclosed; and 'Not Compressed' to represent that the logical file is not compressed. This property is inherited from CIM_LogicalFile.

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, the property allows all instances of this class and its subclasses to be uniquely identified. This property is inherited from CIM_LogicalFile.

File creation date. This property is inherited from CIM_LogicalFile.

Class of the computer system. This property is inherited from CIM_LogicalFile.

String representing the name of the computer system. This property is inherited from CIM_LogicalFile.

Full name of the codec driver. This string is intended to be displayed in large (descriptive) spaces. This property is inherited from CIM_ManagedSystemElement. Example: 'Microsoft PCM Converter'

Drive letter (including colon) of the file. This property is inherited from CIM_LogicalFile. Example: 'c:'

DOS-compatible file name for this file. This property is inherited from CIM_LogicalFile. Example: 'c:\progra~1'

If TRUE, the file is encrypted. This property is inherited from CIM_LogicalFile.

Algorithm or tool used to encrypt the logical file. If it is not possible (or not desired) to describe the encryption scheme (perhaps for security reasons), use the following words: 'Unknown' to represent that it is not known whether the logical file is encrypted or not; 'Encrypted' to represent that the file is encrypted but either its encryption scheme is not known or not disclosed; and 'Not Encrypted' to represent that the logical file is not encrypted. This property is inherited from CIM_LogicalFile.

File extension (without the dot). This property is inherited from CIM_LogicalFile. Examples: 'txt', 'mof', 'mdb'

Name (without extension) of the file. This property is inherited from CIM_LogicalFile. Example: 'autoexec'

Size of the file (in bytes). This property is inherited from CIM_LogicalFile.

File type (indicated by the Extension property). This property is inherited from CIM_LogicalFile.

Class of the file system. This property is inherited from CIM_LogicalFile.

Name of the file system. This property is inherited from CIM_LogicalFile.

Codec represented by this class. Enumeration: 'audio': 1, 'video': 2.

If TRUE, the file is hidden. This property is inherited from CIM_LogicalFile.

Object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.

Number of 'file opens' that are currently active against the file. This property is inherited from CIM_LogicalFile.

File was last accessed. This property is inherited from CIM_LogicalFile.

File was last modified. This property is inherited from CIM_LogicalFile.

Manufacturer string from version resource, if one is present. This property is inherited from CIM_DataFile.

Inherited name that serves as a key of a logical file instance within a file system. Full path names should be provided. This property is inherited from CIM_ManagedSystemElement. Example: 'c:\winnt\system\win.ini'

Path of the file. This includes leading and trailing backslashes. This property is inherited from CIM_LogicalFile. Example: '\windows\system\'

File can be read. This property is inherited from CIM_LogicalFile.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

File is a system file. This property is inherited from CIM_LogicalFile.

Version string from version resource, if one is present. This property is inherited from CIM_DataFile.

File can be written. This property is inherited from CIM_LogicalFile.

The Networking subcategory groups classes that represent network connections, network clients, and network connection settings such as the protocol used.

The Win32_IP4PersistedRouteTable WMI class represents persisted IP routes. By default, the routes added to the routing table are not permanent. Rebooting the computer clears the routes from the table. However, the following Windows NT command makes the route persist after the computer is restarted: route -p add Persistent entries are automatically reinserted in the route table each time the route table is rebuilt. Windows NT stores persistent routes in the registry. This class is only applicable to IP4 and does not address IPX or IP6. This class was added for Windows Server 2003 family.

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.

Description of the object. This property is inherited from CIM_ManagedSystemElement.

Destination IP address for this persisted route.

Object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.

Mask used in this persisted entry. Use the logical AND operation to combine the mask with the destination address. Compare the result to the value in the ipRouteDest field.

Primary routing metric for this persisted route. The semantics of this metric are determined by the routing protocol specified in the route's ipRouteProto value. If this property is not used, its value should be set to -1.

Label by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElement.

IP address of the next hop of this persisted route. If the route is bound to an interface that is realized via a broadcast medium, this field contains the agent's IP address on that interface.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

The Win32_IP4RouteTable WMI class represents information that governs the routing of network data packets. For example, Internet packets are usually sent to a gateway and local packets are routed directly by the client's computer. Administrators can use this information to trace problems associated with misrouted packets, and also direct a computer to a new gateway as necessary. This class is only applicable to IP4 and does not address IPX or IP6. It is intended to model only the information shown as a result of typing the route print command from the command prompt. This class was added for Windows Server 2003 family.

None

The value of this object uniquely identifies the instance entry for this class.

Number of seconds since this route was last updated or otherwise determined to be correct. Whether the routing information is outdated can only be determined by knowing the routing protocol by which the route was learned.

Short description (one-line string) of the object. This property is inherited from CIM_ManagedSystemElement.

Description of the object. This property is inherited from CIM_ManagedSystemElement.

Destination IP address for this route.

Reference to MIB definitions specific to the particular routing protocol that is responsible for this route, as determined by the value specified in the route's ipRouteProto value. If this information is not present, its value should be set to the OBJECT IDENTIFIER {0 0}, which is a syntactically valid object identifier, and any conformant implementation of ASN.1 and BER must be able to generate and recognize this value.

Object was installed. This property does not need a value to indicate that the object is installed. This property is inherited from CIM_ManagedSystemElement.

IP address of the next hop of this route. The value in this property is the same as the value in the InterfaceIndex property in the instances of Win32_NetworkAdapter and Win32_NetworkAdapterConfiguration that represent the network interface of the next hop of the route. In the case of a route bound to an interface that is realized using a broadcast medium, the value of this field is the agent's IP address on that interface.

Mask used in this entry. Masks should be joined with a logical AND with the destination address before being compared to the value in the ipRouteDest field.

Primary routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property. Set the value of this property to -1 if it is not used.

Alternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property. Set the value of this property to -1 if it is not used.

Alternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property. Set the value of this property to -1 if it is not used.

Alternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property. Set the value of this property to -1 if it is not used.

Alternate routing metric for this route. The routing protocol specified in the ipRouteProto value for the route determines the interpretation of this property. Set the value of this property to -1 if it is not used.

Label by which the object is known. When subclassed, the property can be overridden to be a key property. This property is inherited from CIM_ManagedSystemElement.

IP address of the next hop of this route. For a route that is bound to an interface realized via a broadcast medium, the value of this field is the agent's IP address on that interface.

Routing mechanism through which this route was learned. Inclusion of values for gateway routing protocols does not imply that hosts must support those protocols. Enumeration: 'esis': 10, 'isis': 9, 'ggp': 6, 'ospf': 13, 'egp': 5, 'rip': 8, 'bgp': 14, 'ciscoIgrp': 11, 'other': 1, 'bbnSpfIgp': 12, 'icmp': 4, 'local': 2, 'hello': 7, 'netmgmt': 3.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. This property is inherited from the CIM_ManagedSystemElement class. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

Type of route. Enumeration: 'indirect': 4, 'other': 1, 'direct': 3, 'invalid': 2.

The Win32_NetworkClient WMI class represents a network client on a Windows system. Any computer system on the network with a client relationship to the system is a descendent (or member) of this class (for example, a computer running Windows 2000 Workstation or Windows 98 that is part of a Windows 2000 domain).

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the object.

Description of the object.

Object was installed. This property does not need a value to indicate that the object is installed.

Name of the manufacturer of the network client running on the Windows system. Example: 'Microsoft Corporation'

Network name of the network client running on a Windows system. Example: 'Microsoft Windows Network'

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

The Win32_NetworkClient WMI class represents a network client on a Windows system. Any computer system on the network with a client relationship to the system is a descendent (or member) of this class (for example, a computer running Windows 2000 Workstation or Windows 98 that is part of a Windows 2000 domain).

None

The value of this object uniquely identifies the instance entry for this class.

List of access rights to the given file or directory held by the user or group on whose behalf the instance is returned. This property is only supported under Windows NT and Windows 2000. On Windows 98 and on Windows NT/Windows 2000 FAT volumes, the FULL_ACCESS value is returned instead, indicating no security has been set on the object. Value Meaning 0 FILE_DATA_READ (file) FILE_LIST_DIRECTORY (directory) Grants the right to read data from the file. For a directory, this value grants the right to list the contents of the directory. 1 FILE_WRITE_DATA (file) FILE_ADD_FILE (directory) Grants the right to write data to the file. For a directory, this value grants the right to create a file in the directory. 2 FILE_APPEND_DATA (file) FILE_ADD_SUBDIRECTORY (directory) Grants the right to append data to the file. For a directory, this value grants the right to create a subdirectory. 3 FILE_READ_EA Grants the right to read extended attributes. 4 FILE_WRITE_EA Grants the right to write extended attributes. 5 FILE_TRAVERSE Grants the right to execute a file. For a directory, the directory can be traversed. 6 FILE_DELETE_CHILD Grants the right to delete a directory and all the files it contains (its children), even if the files are read-only. 7 FILE_READ_ATTRIBUTES Grants the right to read file attributes. 8 FILE_WRITE_ATTRIBUTES Grants the right to change file attributes. 16 DELETE Grants delete access. 17 READ_CONTROL Grants read access to the security descriptor and owner. 18 WRITE_DAC Grants write access to the discretionary ACL. 19 WRITE_OWNER Assigns the write owner. 20 SYNCHRONIZE Synchronizes access and allows a process to wait for an object to enter the signaled state.

Short description (one-line string) of the object.

Comment supplied by the network provider.

Current state of the network connection. Enumeration: 'disconnected': 4, 'paused': 3, 'connecting': 5, 'error': 2, 'connected': 1, 'reconnecting': 6.

Persistence type of the connection used for connecting to the network. Enumeration: 'currentConnection': 1, 'persistentConnection': 2.

Description of the object.

Network object should be displayed in a network browsing user interface. Enumeration: 'generic': 2, 'domain': 1, 'share': 4, 'server': 3.

Object was installed. This property does not need a value to indicate that the object is installed.

Local name of the connected network device. Example: 'c:\public'

Name of the current network connection. It is the combination of the values in RemoteName and LocalName. Example: '\\NTRELEASE (c:\public)'

Connection will be reconnected automatically by the operating system on the next logon.

Name of the provider that owns the resource. This property can be NULL if the provider name is unknown.

Remote network resource name for a network resource. For a current or persistent connection, RemoteName contains the network name associated with the name of the value in the LocalName property. The name in RemoteName must follow the network provider's naming conventions. Example: '\\NTRELEASE'

Full path to the network resource. Example: '\\infosrv1\public'

Type of resource to enumerate or connect to. Enumeration: 'print': 2, 'disk': 1, 'any': 3.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

User name or the default user name used to establish a network connection. Example: 'SYSTEM'

The Win32_NetworkProtocol WMI class represents a protocol and its network characteristics on a Win32 computer system.

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the object.

Protocol supports connectionless service. A connectionless (datagram) service describes a communications protocol or transport in which data packets are routed independently of each other and may follow different routes and arrive in a different order from that in which they were sent. Conversely, a connection-oriented service provides a virtual circuit through which data packets are received in the same order they were transmitted. If the connection between machines fails, the application is notified.

Description of the object.

Protocol supports guaranteed delivery of data packets. If this flag is FALSE, there is no guarantee that all data sent will reach the intended destination.

Protocol guarantees that data will arrive in the order in which it was sent. Note that this characteristic does not guarantee delivery of the data, only its order.

Object was installed. This property does not need a value to indicate that the object is installed.

Maximum length of a socket address supported by the protocol. Socket addresses may be items like URLs (www.microsoft.com) or IP addresses (130.215.24.1).

Maximum message size supported by the protocol. This is the maximum size of a message that can be sent from or received by the host. For protocols that do not support message framing, the actual maximum size of a message that can be sent to a given address may be less than this value.

Protocol is message-oriented. A message-oriented protocol uses packets of data to transfer information. Conversely, stream-oriented protocols transfer data as a continuous stream of bytes.

Minimum length of a socket address supported by the protocol.

Name for the protocol. Example: 'TCP/IP'

Protocol is a message-oriented protocol that can receive variable-length data packets or streamed data for all receive operations. This optional capability is useful when an application does not want the protocol to frame messages, and requires stream-oriented characteristics. If TRUE, the protocol is pseudo stream-oriented.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

Protocol supports a mechanism for broadcasting messages across the network.

Protocol allows data to be connected across the network.

Protocol allows data to be disconnected across the network.

Protocol supports data encryption.

Protocol supports expedited data (also known as urgent data) across the network. Expedited data can bypass flow control and receive priority over normal data packets.

Protocol supports transmitting the data in fragments. Physical network maximum transfer unit (MTU) is hidden from applications. Each media type has a maximum frame size that cannot be exceeded. The link layer is responsible for discovering the MTU and reporting it to the protocols being used.

Protocol supports two-phase close operations, also known as graceful close operations. If not, the protocol supports only abortive close operations.

Protocol has a mechanism to establish and maintain a guaranteed bandwidth.

Protocol supports multicasting.

Protocol is capable of Quality of Service (QOS) support by the underlying layered service provider or transport carrier. QOS is a collection of components that enable differentiation and preferential treatment for subsets of data transmitted over the network. QOS loosely means subsets of data get higher priority or guaranteed service when traversing a network.

The Win32_NTDomain WMI class represents a Windows NT domain. This class is new for Windows XP.

None

The value of this object uniquely identifies the instance entry for this class.

Short description of the object. This property is inherited from CIM_ManagedSystemElement.

Name of the site where the domain controller is configured. This value can be NULL.

Name of the first concrete class in the inheritance chain that is used to create an instance. You can use this property with other properties of the class to identify all instances of the class and its subclasses. This property is inherited from CIM_System.

Name of the site where the domain controller is located. This value can be NULL.

Comment that describes the link. This property is inherited from CIM_ManagedSystemElement.

Name of the root of the DNS tree.

Address of the discovered domain controller.

Type of address specified in the DomainControllerAddress property. Enumeration: 'dnsNETBIOSADDRESS': 2, 'dnsINETADDRESS': 1.

Computer name for the discovered domain controller.

Globally unique identifier (GUID) of the domain controller. This property is 0 (zero) if the domain controller does not have a GUID.

Name of the domain. Example: microsoft.com

If TRUE, the domain controller is a directory service server.

If true the Domain Controller Name is in DNS format. Example: www.mynode.com or 135.5.33.19

If TRUE, the DomainName value is in DNS format.

If TRUE, the DNSForestName value is in DNS format.

If TRUE, the domain controller is a Global Catalog server for the DNSForestName value.

If TRUE, the domain controller is a Kerberos Key Distribution Center for the domain.

If TRUE, the domain controller is the Primary Domain Controller.

If TRUE, the domain is running the Windows Time service.

If TRUE, the domain controller hosts a writeable DS or Security Accounts Manager (SAM).

Date and time when an object is installed. An object does not need a value to indicate that it is installed. This property is inherited from CIM_ManagedSystemElement.

Name of an object. This property is inherited from CIM_ManagedSystemElement.

Format to generate the system name using the subclass heuristic. This property is inherited from CIM_System.

Contact information for the primary system owner. This property is inherited from CIM_System.

Name of the primary system owner. This property is inherited from CIM_System.

Roles for this system in the IT environment. This property is inherited from CIM_System. Example: 'Switch' or 'Bridge'

Current status of an object. Various operational and non-operational statuses can be defined. Operational statuses include: OK, Degraded, and Pred Fail, which is an element such as a SMART-enabled hard drive that may be functioning properly, but predicts a failure in the near future. Non-operational statuses include: Error, Starting, Stopping, and Service, which can apply during mirror resilvering of a disk, reloading a user permissions list, or other administrative work. Not all status work is online, but the managed element is not OK or in one of the other states. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'nonRecover': 10, 'lostComm': 12, 'ok': 1, 'service': 8, 'predFail': 5, 'noContact': 11, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6, 'stressed': 9.

The Operating System Settings subcategory groups classes that represent the Operating System and its settings.

The Win32_BootConfiguration WMI class represents the boot configuration of a Windows system.

None

The value of this object uniquely identifies the instance entry for this class.

Path to the system files required for booting the system. Example: 'C:\Windows'

Short description (one-line string) of the CIM_Setting object. This property is inherited from CIM_Setting.

Path to the configuration files. This value may be similar to the value in the BootDirectory property.

Description of the CIM_Setting object. This property is inherited from CIM_Setting.

Last drive letter to which a physical drive is assigned. Example: 'E:'

Name of the boot configuration. It is an identifier for the boot configuration.

Directory where temporary files can reside during boot time.

Identifier by which the CIM_Setting object is known. This property is inherited from CIM_Setting.

Directory where temporary files are stored. Example: 'C:\TEMP'

The Win32_ComputerSystem WMI class represents a computer operating system in a Windows environment.

None

The value of this object uniquely identifies the instance entry for this class.

System hardware security settings for administrator password status. Enumeration: 'disabled': 1, 'unknown': 4, 'enabled': 2, 'notImplemented': 3.

Automatic reset boot option is enabled.

Automatic reset is enabled. This capability is available on Windows XP, Windows 2000, and Windows NT, but not on Windows 98 or Windows 95.

Boot option limit is ON. Identifies the system action when the ResetLimit value is reached. Enumeration: 'doNotReboot': 4, 'reserved': 1, 'operatingSystem': 2, 'systemUtilities': 3.

Type of reboot action after the time on the watchdog timer is elapsed. Enumeration: 'doNotReboot': 4, 'reserved': 1, 'operatingSystem': 2, 'systemUtilities': 3.

Indicates whether or not a boot ROM is supported.

System is started. Fail-safe boot bypasses the user startup files also called SafeBoot. Enumeration: 'failsafeWithNetworkBoot': 3, 'failsafeBoot': 2, 'normalBoot': 1.

Short description of the object a one-line string. This property is inherited from CIM_ManagedSystemElement.

Bootup state of the chassis. Enumeration: 'unknown': 2, 'other': 1, 'critical': 5, 'safes': 3, 'warning': 4, 'nonrecoverable': 6.

Name of the first concrete class in the inheritance chain of an instance. You can use this property with other properties of the class to identify all instances of the class and its subclasses. This property is inherited from CIM_System

Amount of time the unitary computer system is offset from Universal Time Coordinate (UTC).

Daylight savings mode is ON.

Description of the object.

Name of local computer according to the domain name server (DNS). This property is new for Windows Server 2003.

Name of the domain to which a computer belongs. Note If the computer is not part of a domain, then the name of the workgroup will be returned.

Role of a computer in an assigned domain workgroup. A domain workgroup is a collection of computers on the same network. For example, a DomainRole property may show that a computer is a member workstation. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'memberWorkstation': 1, 'primaryDomainController': 5, 'standaloneServer': 2, 'backupDomainController': 4, 'memberServer': 3, 'standaloneWorkstation': 0.

Windows XP, Windows Server 2003: Enables daylight savings time (DST) on a machine. A value of true indicates that the system time changes to an hour ahead or behind when DST starts or ends. A value of false indicates that the system time does not change to an hour ahead or behind when DST starts or ends. A value of NULL indicates that the DST status is unknown on a system.

The following table identifies the hardware security settings for the reset button on a computer. Enumeration: 'disabled': 0, 'unknown': 3, 'enabled': 1, 'notImplemented': 2.

Infrared (IR) port exists on a computer system.

Data needed to find the initial load device or boot service to request the operating system start up. This property is inherited from CIM_UnitaryComputerSystem.

Object is installed. An object does not need a value to indicate that it is installed. This property is inherited from CIM_ManagedSystemElement.

System hardware security settings for Keyboard Password Status. Enumeration: 'disabled': 0, 'unknown': 3, 'enabled': 1, 'notImplemented': 2.

Array entry of the InitialLoadInfo property that contains the data to boot the operating system that is loaded. This property is inherited from CIM_UnitaryComputerSystem.

Name of a computer manufacturer. Example: Adventure Works

Product name that a manufacturer gives to a computer. This property must have a value.

Key of a CIM_System instance in an enterprise environment. This property is inherited from CIM_ManagedSystemElement.

Computer system Name value that is generated automatically. The CIM_ComputerSystem object and its derivatives are top level objects of the Common Information Model (CIM). They provide the scope for several components. Unique CIM_System keys are required, but you can define a heuristic to create the CIM_ComputerSystem name that generates the same name, and is independent from the discovery protocol. This prevents inventory and management problems when the same asset or entity is discovered multiple times, but cannot be resolved to one object. Using a heuristic is recommended but not required. The heuristic is outlined in the CIM V2 Common Model specification, and assumes that the documented rules are used to determine and assign a name. The NameFormat values list defines the order to assign a computer system name. Several rules map to the same value. The CIM_ComputerSystem Name value that is calculated using the heuristic is the key value of the system. However, you can use aliases to assign a different name for CIM_ComputerSystem, which can be more unique to your company. This property is inherited from CIM_System. Enumeration: 'dial': 3, 'sna': 13, 'ip': 2, 'dcc': 10, 'hwa': 6, 'osi': 14, 'other': 15, 'hid': 4, 'nwa': 5, 'x25': 7, 'e164': 12, 'ipx': 9, 'icd': 11, 'isdn': 8.

Network Server Mode is enabled.

Number of physical processors currently available on a system. This is the number of enabled processors for a system, which does not include the disabled processors. If a computer system has two physical processors each containing two logical processors, then the value of NumberOfProcessors is 2 and NumberOfLogicalProcessors is 4. The processors may be multi-core or they may be hyperthreading processors. For more information, see Remarks. Windows Server 2003, Windows XP, and Windows 2000: Because the NumberOfLogicalProcessors property is not available, NumberOfProcessors indicates the number of logical processors available in the system. In the case of a computer system that has two physical processors each containing two logical processors, the value of NumberOfProcessors is 4.

List of data for a bitmap that the original equipment manufacturer (OEM) creates.

List of free form strings that an OEM defines. For example, an OEM defines the part numbers for system reference documents, manufacturer contact information, and so on.

Windows XP, Windows Server 2003: If true, the computer is part of a domain or workgroup. If the value is NULL, the computer is not a part of a domain or workgroup, or the status is unknown.

Time delay before a reboot is initiated in milliseconds. It is used after a system power cycle, local or remote system reset, and automatic system reset. A value of -1 (minus one) indicates that the pause value is unknown.

Specific power capabilities of a logical device. The Enabled value indicates that the power management features are currently enabled, but the exact setting is unknown or the information is unavailable. Power Saving Modes Entered Automatically indicates that a device can change its power state based on usage or other criteria. Power State Settable indicates that the SetPowerState method is supported. Power Cycling Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5; Timed Power On Supported indicates that the SetPowerState method can be invoked with the PowerState parameter set to 5; and Time set to a specific date and time, or interval to power ON. This property is inherited from CIM_UnitaryComputerSystem. Value Meaning 0 Unknown 1 Not Supported 2 Disabled 3 Enabled 4 Power Saving Modes Entered Automatically 5 Power State Settable 6 Power Cycling Supported 7 Timed Power On Supported

Device can be power-managed, for example, a device can be put into suspend mode, and so on. This property does not indicate that power management features are enabled currently, but it does indicate that the logical device is capable of power management. This property is inherited from CIM_UnitaryComputerSystem.

System hardware security settings for Power On Password Status. Enumeration: 'disabled': 0, 'unknown': 3, 'enabled': 1, 'notImplemented': 2.

Current power state of a computer and its associated operating system. The power saving states have the following values: Value 4 (Unknown) indicates that the system is known to be in a power save mode, but its exact status in this mode is unknown; 2 (Low Power Mode) indicates that the system is in a power save state, but still functioning and may exhibit degraded performance; 3 (Standby) indicates that the system is not functioning, but could be brought to full power quickly; and 7 (Warning) indicates that the computerSystem is in a warning state and a power save mode. This property is inherited from CIM_UnitaryComputerSystem. Enumeration: 'powerCycle': 5, 'unknown': 0, 'powerSaveUnknown': 4, 'powerSaveWarning': 7, 'powerOff': 6, 'powerSaveStandby': 3, 'fullPower': 1, 'powerSaveLowPowerMode': 2.

State of the power supply or supplies when last booted. Enumeration: 'unknown': 2, 'safe': 3, 'other': 1, 'critical': 5, 'warning': 4, 'nonrecoverable': 6.

Contact information for the primary system owner, for example, phone number, e-mail address, and so on. This property is inherited from CIM_System.

Name of the primary system owner. This property is inherited from CIM_System.

If enabled, the value is 4 and the unitary computer system can be reset using the power and reset buttons. If disabled the value is 3, and a reset is not allowed. This property is inherited from CIM_UnitaryComputerSystem. Enumeration: 'disabled': 3, 'unknown': 2, 'other': 1, 'enabled': 4, 'nonrecoverable': 5.

Number of automatic resets since the last reset. A value of -1 (minus one) indicates that the count is unknown.

Number of consecutive times a system reset is attempted. A value of -1 (minus one) indicates that the limit is unknown.

List that specifies the roles of a system in the information technology environment. This property is inherited from CIM_System.

Current status of an object. Various operational and non-operational statuses can be defined. Operational statuses include: OK, Degraded, and Pred Fail, which is an element such as a SMART-enabled hard drive that may be functioning properly, but predicts a failure in the near future. Non-operational statuses include: Error, Starting, Stopping, and Service, which can apply during mirror resilvering of a disk, reloading a user permissions list, or other administrative work. Not all status work is online, but the managed element is not OK or in one of the other states. This property is inherited from CIM_ManagedSystemElement. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

List of the support contact information for the Windows operating system.

Time to delay before starting the Windows operating system in seconds.

List of the options for starting up the Windows operating system. This property must have a value.

Index of the default start up profile. This value is calculated so that it usually returns 0 (zero), because at write-time the profile string is physically moved to the top of the list, which is how Windows NT determines the default value.

System running on the Windows computer. This property must have a value. Enumeration: 'x86Nec98PC': 10, 'unknown': 9, 'powerPC': 4, 'alphaBasedPC': 3, 'shxPC': 5, 'mipsBasedPC': 2, 'n64bitAlphaPC': 8, 'n64bitIntelPC': 7, 'x86BasedPC': 1, 'strongARMPC': 6.

Thermal state of the system when last booted. Enumeration: 'unknown': 2, 'safe': 3, 'other': 1, 'critical': 5, 'warning': 4, 'nonrecoverable': 6.

Total size of physical memory. Example: 67108864

Name of a user that is logged on currently. This property must have a value. In a terminal services session, UserName returns the name of the user that is logged on to the console not the user logged on during the terminal service session. Example: jeffsmith

Event that causes the system to power up. Enumeration: 'reserved': 0, 'apmTimer': 3, 'unknown': 2, 'other': 1, 'acPowerRestored': 8, 'modemRing': 4, 'lanRemote': 5, 'powerSwitch': 6, 'pciPME': 7.

Windows Server 2003 and Windows XP: Name of the workgroup for this computer. If the value of the PartOfDomain property is false, then the name of the workgroup is returned.

If True, the system manages the page file.

Number of logical processors available on the computer. You can use NumberOfLogicalProcessors and NumberOfProcessors to determine if the computer is hyperthreading. For more information, see Remarks.

Type of the computer in use, such as laptop, desktop, or Tablet. Enumeration: 'workstation': 3, 'enterpriseServer': 4, 'mobile': 2, 'sohoServer': 5, 'maximum': 8, 'unspecified': 0, 'desktop': 1, 'appliancePC': 6, 'performanceServer': 7.

The Win32_ComputerSystemProduct WMI class represents a product. This includes software and hardware used on this computer system.

None

The value of this object uniquely identifies the instance entry for this class.

Short description of the object a one-line string. This property is inherited from CIM_Product.

Description of the product. This property is inherited from CIM_Product.

Product identification such as a serial number on software or a die number on a hardware chip. This property is inherited from CIM_Product.

Commonly used product name. This property is inherited from CIM_Product.

Product SKU (stock-keeping unit) information. This property is inherited from CIM_Product.

Universally unique identifier (UUID) for this product. A UUID is a 128-bit identifier that is guaranteed to be different from other generated UUIDs. If a UUID is not available, a UUID of all zeros is used.

Name of the product supplier. Corresponds to the Vendor property in the product object in the Desktop Management Task Force (DMTF) Solution Exchange Standard. This property is inherited from CIM_Product.

Product version information. Corresponds to the Version property in the product object in the DMTF Solution Exchange Standard. This property is inherited from CIM_Product.

The Win32_LoadOrderGroup WMI class represents a group of system services that define execution dependencies. The services must be initiated in the order specified by the Load Order Group, as the services are dependent on each other. These dependent services require the presence of the antecedent services to function correctly. The data in this class is derived by the provider from the registry key: System\CurrentControlSet\Control\GroupOrderList

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the object.

Description of the object.

Indicates whether this load order group can include drivers along with system services.

Sequence in which this group of services is loaded onto the operating system. Example: 2

Date object was installed. This property does not require a value to indicate that the object is installed.

Name of the load order group. Example: 'Primary disk'

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may function properly but predicts a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The 'Service' status applies to administrative work, such as mirror-resilvering of a disk or reload of a user permissions list. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

The Win32_OperatingSystem WMI class represents an operating system installed on a Windows computer system. Any operating system that can be installed on a Windows system is a descendent or member of this class. If a computer has multiple operating systems installed, this class returns only an instance for the currently active operating system.

None

The value of this object uniquely identifies the instance entry for this class.

Name of the disk drive from which the Windows operating system boots. Example: '\\Device\Harddisk0'

Build number of an operating system. It can be used for more precise version information than product release version numbers. Example: '1381'

Type of build used for an operating system. Examples: 'retail build', 'checked build'

Short description of the object a one-line string. The string includes the operating system version. For example, 'Microsoft Windows XP Professional Version = 5.1.2500'. This property can be localized.

Code page value an operating system uses. A code page contains a character table that an operating system uses to translate strings for different languages. The American National Standards Institute (ANSI) lists values that represent defined code pages. If an operating system does not use an ANSI code page, this member is set to 0 (zero). The CodeSet string can use up to six characters to define the code page value. Example: '1255'

Code for the country/region that an operating system uses. Values are based on international phone dialing prefixes also referred to as IBM country/region codes. The property can use up to six characters to define the country/region code value. Example: '1' (United States)

Name of the first concrete class that appears in the inheritance chain used in the creation of an instance. When used with other key properties of the class, the property allows all instances of this class and its subclasses to be identified uniquely.

Creation class name of the scoping computer system.

Null-terminated string that indicates the latest service pack installed on a computer system. If no service pack is installed, the string is NULL. For computers running Windows 95, this property contains a null-terminated string that provides arbitrary additional information about the operating system. Example: 'Service Pack 3'

Name of the scoping computer system.

Number of minutes an operating system is offset from Greenwich mean time (GMT). The number is positive, negative, or zero.

When the data execution prevention hardware feature is available, then if TRUE, this property indicates that the feature is set to work for 32-bit applications. On 64-bit computers, the data execution prevention feature is configured in the Boot.ini file and the properties in Win32_OperatingSystem are set accordingly. This property is set to FALSE on 32-bit computers. Windows XP SP1 and earlier: This property is not available. Windows Server 2003 and earlier: This property is not available.

Data execution prevention is an AMD 64-bit hardware feature to prevent buffer overrun attacks by stopping the execution of code on data type memory pages. If TRUE, then this feature is available. On 64-bit computers, the data execution prevention feature is configured in the Boot.ini file and the properties in Win32_OperatingSystem are set accordingly. This property is set to FALSE on 32-bit computers. Windows XP SP1 and earlier: This property is not available. Windows Server 2003 and earlier: This property is not available.

When the data execution prevention hardware feature is available, then if TRUE, this property indicates that the feature is set to work for drivers. On 64-bit computers, the data execution prevention feature is configured in the Boot.ini file and the properties in Win32_OperatingSystem are set accordingly. This property is set to FALSE on 32-bit computers. Windows XP SP1 and earlier: This property is not available. Windows Server 2003 and earlier: This property is not available.

Operating system is a checked (debug) build. If TRUE, the debugging version of User.exe is installed. Checked builds provide error checking, argument verification, and system debugging code. Additional code in a checked binary generates a kernel debugger error message and breaks into the debugger. This helps immediately determine the cause and location of the error. Performance suffers in a checked build due to the additional code that is executed.

Description of the Windows operating system. Some user interfaces (those that allow editing of this description) limit its length to 48 characters.

Operating system is distributed across several computer system nodes. If so, these nodes should be grouped as a cluster.

Windows Server 2003, Windows XP: Encryption level for secure transactions 40-bit, 128-bit, or n-bit.

Increase in priority given to the foreground application. On computer systems running Windows NT 4.0 and Windows 2000, application boost is implemented by giving an application more execution time slices (quantum lengths). A ForegroundApplicationBoost value of 0 (zero) indicates the system boosts the quantum length by 6; if 1, then 12; and if 2 then 18. On Windows NT 3.51 and earlier, application boost is implemented by increasing the scheduling priority. For these systems, the scheduling priority is increased by the value of this property. The default value is 2. Enumeration: 'none': 0, 'minimum': 1, 'maximum': 2.

Number of kilobytes of physical memory currently unused and available.

Number of kilobytes that can be mapped into the operating system paging files without causing any other pages to be swapped out.

Number of kilobytes of virtual memory currently unused and available. For example, this may be calculated by adding the amount of free RAM to the amount of free paging space, that is, adding the FreePhysicalMemory and FreeSpaceInPagingFiles properties.

Date object was installed. This property does not require a value to indicate that the object is installed.

Indicates whether or not to optimize memory for applications or system performance. Windows 2000 and earlier: This property is not available. Enumeration: 'optimizeMemoryForApplications': 0, 'optimizeMemoryForSystemPerform': 1.

Operating system was last booted.

Operating system's version of the local date and time of day.

Language identifier used by the operating system. A language identifier is a standard international numeric abbreviation for a country/region. Each language has a unique language identifier (LANGID), a 16-bit value that consists of a primary language identifier and a secondary language identifier.

Name of the operating system manufacturer. For Windows systems, this value is 'Microsoft Corporation'.

Maximum number of process contexts the operating system can support. If there is no fixed maximum, the value should be 0 (zero). On systems that have a fixed maximum, this object can help diagnose failures that occur when the maximum is reached if unknown, enter -1.

Maximum number of kilobytes of memory that can be allocated to a process. For operating systems with no virtual memory, typically this value is equal to the total amount of physical memory minus the memory used by the BIOS and OS. For some operating systems, this value may be infinity, in which case 0 (zero) should be entered. In other cases, this value could be a constant, for example, 2G or 4G.

Operating system instance within a computer system.

Number of user licenses for the operating system. If unlimited, enter 0 (zero). If unknown, enter -1.

Number of process contexts currently loaded or running on the operating system.

Number of user sessions for which the operating system is storing state information currently.

Company name for the registered user of the operating system. Example: 'Microsoft Corporation'

Language version of the operating system installed. Enumeration: 'englishBelize': 10249, 'germanLuxembourg': 4103, 'chinese': 4, 'arabicLebanon': 12289, 'englishUnitedKingdom': 2057, 'belarusian': 1059, 'macedonianFYROM': 1071, 'urd': 1056, 'polish': 1045, 'thai': 1054, 'arabicBahrain': 15361, 'icelandic': 1039, 'turkish': 1055, 'norwegianBokmal': 1044, 'frenchCanada': 3084, 'spanishGuatemala': 4106, 'spanishUruguay': 14346, 'swedishFinland': 2077, 'indonesian': 1057, 'hungarian': 1038, 'germanSwitzerland': 2055, 'arabicUAE': 14337, 'catalan': 1027, 'russianMoldova': 2073, 'spanishMexico': 2058, 'arabicJordan': 11265, 'sut': 1072, 'finnish': 1035, 'chineseSingapore': 4100, 'tswana': 1074, 'gaelic': 1084, 'italianItaly': 1040, 'serbian': 1070, 'englishJamaica': 8201, 'croatian': 1050, 'faeroese': 1080, 'arabicLibya': 4097, 'czech': 1029, 'japanese': 1041, 'spanishParaguay': 15370, 'spanishArgentina': 11274, 'yiddish': 1085, 'serbianLatin': 2074, 'arabicOman': 8193, 'xhosa': 1076, 'estonian': 1061, 'englishAustralia': 3081, 'spanishNicaragua': 19466, 'spanishPuertoRico': 20490, 'spanishPer': 10250, 'spanishElSalvador': 17418, 'spanishHonduras': 18442, 'norwegianNynorsk': 2068, 'afrikaans': 1078, 'albanian': 1052, 'vietnamese': 1066, 'latvian': 1062, 'romanian': 1048, 'germanLiechtenstein': 5127, 'slovak': 1051, 'arabicTunisia': 7169, 'basque': 1069, 'dutchBelgium': 2067, 'englishUnitedStates': 1033, 'spanishBolivia': 16394, 'malayMalaysia': 1086, 'serbianCyrillic': 3098, 'chinesePRC': 2052, 'hindi': 1081, 'chineseTaiwan': 1028, 'portugueseBrazil': 1046, 'rhaetoRomanic': 1047, 'danish': 1030, 'bulgarian': 1026, 'englishNewZealand': 5129, 'dutchNetherlands': 1043, 'arabicYemen': 9217, 'germanAustria': 3079, 'frenchFrance': 1036, 'englishIreland': 6153, 'spanishDominicanRepublic': 7178, 'russian': 1049, 'frenchSwitzerland': 4108, 'portuguesePortugal': 2070, 'frenchLuxembourg': 5132, 'arabicAlgeria': 5121, 'arabicMorocco': 6145, 'arabicQatar': 16385, 'frenchBelgium': 2060, 'romanianMoldova': 2072, 'spanishEcuador': 12298, 'spanishTraditionalSort': 1034, 'arabicSyria': 10241, 'spanishCostaRica': 5130, 'hebrew': 1037, 'arabic': 1, 'farsi': 1065, 'arabicKuwait': 13313, 'swedish': 1053, 'arabicSaudiArabia': 1025, 'zul': 1077, 'englishTrinidad': 11273, 'slovenian': 1060, 'spanishPanama': 6154, 'spanishVenezuela': 8202, 'korean': 1042, 'spanishColombia': 9226, 'arabicEgypt': 3073, 'ukrainian': 1058, 'lithuanian': 1063, 'arabicIraq': 2049, 'maltese': 1082, 'tsonga': 1073, 'englishSouthAfrica': 7177, 'spanishInternationalSort': 3082, 'italianSwitzerland': 2064, 'spanishChile': 13322, 'greek': 1032, 'english': 9, 'chineseHongKongSAR': 3076, 'englishCanada': 4105, 'germanGermany': 1031.

Installed and licensed system product additions to the operating system. For example, the value of 146 (0x92) for OSProductSuite indicates Enterprise, Terminal Server, and Data Center (bits one, four, and seven set). The following table identifies the possible values. Value Meaning 0x1 Small Business 0x2 Enterprise 0x4 BackOffice 0x8 Communication Server 0x10 Terminal Server 0x20 Small Business (Restricted) 0x40 Embedded NT 0x80 Data Center

Type of operating system. Enumeration: 'dgux': 4, 'tandemNSK': 33, 'solaris': 29, 'win95': 16, 'u6000': 31, 'win98': 17, 'hpMPE': 54, 'ncr3000': 20, 'sunOS': 30, 'hpux': 8, 'beOS': 53, 'freeBSD': 42, 'linux': 36, 'aseries': 32, 'gnuHurd': 44, 'osf': 22, 'winnt': 18, 'scoUnixWare': 25, 'epoc': 49, 'unknown': 0, 'macros': 2, 'other': 1, 'mvs': 10, 'win3x': 15, 'os400': 11, 'os9': 45, 'netWare': 21, 'attunix': 3, 'os2': 12, 'qnx': 48, 'tandemNT': 34, 'openVMS': 7, 'msdos': 14, 'reliantUNIX': 24, 'wince': 19, 'rhapsody': 57, 'miNT': 52, 'inferno': 47, 'sequent': 27, 'nextStep': 55, 'decnt': 5, 'vmESA': 39, 'aix': 9, 'machKernel': 46, 'scoOpenServer': 26, 'vxWorks': 51, 'javaVM': 13, 'irix': 28, 'xenix': 38, 'digitalUnix': 6, 'ixWorks': 50, 'dcOS': 23, 'bsdunix': 41, 'lynx': 37, 'interactiveUNIX': 40, 'bs2000': 35, 'palmPilot': 56, 'netBSD': 43.

Manufacturer and operating system type that is used when the operating system property OSType is set to 1 (Other). The format of the string inserted in OtherTypeDescription should be similar in format to the value strings defined for OSType. The OtherTypeDescription property should be set to NULL when OSType is any value other than 1.

Physical Address Extension (PAE) is enabled by the operating system running on Intel processors. PAE allows applications to address more than 4 GB of physical memory. When PAE is enabled, the operating system uses three-level linear address translation rather than two-level. Providing more physical memory to an application reduces the need to swap memory to the page file and increases performance. To enable, PAE, use the /PAE switch in the Boot.ini file. Windows XP and earlier: The PAEEnabled property is not available.

Identification number for the Windows Plus! operating system enhancement software if installed.

Version number of the Windows Plus! operating system enhancement software if installed.

Primary operating system.

Additional information about the system. Enumeration: 'workStation': 1, 'domainController': 2, 'server': 3.

Number of clock ticks per quantum. A quantum is a unit of execution time that the scheduler is allowed to give to an application before switching to other applications. When a thread runs one quantum, the kernel preempts it and moves it to the end of a queue for applications with equal priorities. The actual length of a thread's quantum varies across different Windows platforms Windows NT/Windows 2000 only. Enumeration: 'unknown': 1, 'oneTick': 2, 'twoTicks': 3.

Length type of quantums. Windows NT 4.0 Workstation/Windows 2000 defaults to variable-length quantums where the foreground application has a longer quantum than the background applications. Windows NT server defaults to fixed-length quantums. A quantum is a unit of execution time that the scheduler is allowed to give to an application before switching to another application. When a thread runs one quantum, the kernel preempts it and moves it to the end of a queue for applications with equal priorities. The actual length of a thread's quantum varies across different Windows platforms. For Windows NT/Windows 2000 only. Enumeration: 'variable': 3, 'unknown': 1, 'fixed': 2.

Name of the registered user of the operating system. Example: 'Ben Smith'

Operating system product serial identification number. Example: '10497-OEM-0031416-71674'

Major version number of the service pack installed on the computer system. If no service pack has been installed, the value is 0 (zero). Windows NT 4.0, Windows Me/98/95: This property is present but the value is NULL.

Minor version number of the service pack installed on the computer system. If no service pack has been installed, the value is 0 (zero). Windows NT 4.0, Windows Me/98/95: This property is present but the value is NULL.

Total number of kilobytes that can be stored in the operating system's paging files 0 (zero) indicates that there are no paging files. Note that this number does not represent the actual physical size of the paging file on disk.

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive may function properly, but predicts a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The 'Service' status applies to administrative work, such as mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, but the managed element is neither 'OK' nor in one of the other states. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

Bit flags that identify the product suites available on the system. Windows 2000 Server and earlier, Windows 2000 and earlier: This property is not available. For example, to specify both Personal and Back Office you set SuiteMask to 4 | 512 or 516. The following table identifies the possible values. Value Meaning 1 Small Business 2 Enterprise 4 Back Office 8 Communications 16 Terminal 32 Small Business Restricted 64 Embedded NT 128 Data Center 256 Single User 512 Personal 1024 Blade

Physical disk partition on which the operating system is installed.

System directory of the operating system. Example: 'C:\WINDOWS\SYSTEM32'

Letter of the disk drive on which the operating system resides. Example: 'C:' Windows 2000 Server and earlier, Windows 2000 and earlier: This property is not available.

Total swap space in kilobytes. This value may be NULL (unspecified) if swap space is not distinguished from page files. However, some operating systems distinguish these concepts. For example, in UNIX, whole processes can be swapped out when the free page list falls and remains below a specified amount.

Number of kilobytes of virtual memory. For example, this may be calculated by adding the amount of total RAM to the amount of paging space, that is, adding the amount of memory in or aggregated by the computer system to the property, SizeStoredInPagingFiles.

Total amount of physical memory available to the operating system. This value does not necessarily indicate the true amount of physical memory, but what is reported to the operating system as available to it.

Version number of the operating system. Example: '4.0'

Windows directory of the operating system. Example: 'C:\WINDOWS'

The Win32_OSRecoveryConfiguration WMI class represents the types of information that will be gathered from memory when the operating system fails. This includes boot failures and system crashes.

None

The value of this object uniquely identifies the instance entry for this class.

System will automatically reboot during a recovery operation.

Short description of the CIM_Setting object a one-line string.

Full path to the debug file. A debug file is created with the memory state of the computer after a computer failure. Example: 'C:\WinNT\Memory.dmp'

Windows XP, Windows Server 2003: Type of debugging information written to the log file. Enumeration: 'completeMemoryDump': 1, 'none': 0, 'kernelMemoryDump': 2, 'smallMemoryDump': 3.

Description of the CIM_Setting object.

Windows XP, Windows Server 2003: Expanded version of the DebugFilePath property. Example: 'C:\WinNT\Memory.dmp'

Windows XP, Windows Server 2003: Expanded version of the MiniDumpDirectory property. Example: 'C:\WinNT\MiniDump'

Only kernel debug information will be written to the debug log file. If TRUE, then only the state of the kernel is written to a file in the event of a system failure. If FALSE, the system will try to log the state of the memory, and any devices that can provide information about the system when it failed.

Windows XP, Windows Server 2003: Directory where small memory dump files will be recorded and accumulated. Example: '%systemRoot%\MiniDump'

Identifying name for this instance of the Win32_OSRecoveryConfiguration class.

New log file will overwrite an existing one.

Alert message will be sent to the system administrator in the event of an operating system failure.

Identifier by which the CIM_Setting object is known.

Debugging information is to be written to a log file.

Events will be written to a system log.

The Win32_QuickFixEngineering WMI class represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

None

The value of this object uniquely identifies the instance entry for this class.

Short textual description (one-line string) of the object.

Local name of the computer system. The value for this property comes from the CIM_ComputerSystem class.

Description of the object.

Additional comments relating to the update. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Hotfix

Unique identifier associated with a particular QFE. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Hotfix

Object was installed. This property does not need a value to indicate that the object is installed.

Person who installed the update. If this value is unknown, the property will be empty. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Hotfix

Update was installed. If this value is unknown, the property will be empty. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Hotfix

Label by which the object is known. When subclassed, the property can be overridden to be a key property.

Service pack in effect when the update was applied. If no service pack has been applied, the property takes on the value SP0. If it cannot be determined what service pack was in effect, this property will be NULL. This property represents data found in the Windows registry key: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Hotfix

Current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: 'OK', 'Degraded', and 'Pred Fail' (an element, such as a SMART-enabled hard drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: 'Error', 'Starting', 'Stopping', and 'Service'. The latter, 'Service', could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is on-line, yet the managed element is neither 'OK' nor in one of the other states. Enumeration: 'ok': 1, 'service': 8, 'predFail': 5, 'error': 2, 'unknown': 4, 'stopping': 7, 'degraded': 3, 'starting': 6.

The Win32_StartupCommand WMI class represents a command that runs automatically when a user logs onto the computer system.

None

The value of this object uniquely identifies the instance entry for this class.

Short description (one-line string) of the CIM_Setting object.

Command run by the startup command. Example: 'c:\winnt\notepad.exe myfile.txt'

Description of the CIM_Setting object.

Path where the startup command resides on the disk file system.

File name of the startup command. Example: 'FindFast'

Identifier by which the CIM_Setting object is known.

User name for whom this startup command will run. Example: 'mydomain\myname'

This OID can only be written to and cannot be read! The Win32Shutdown WMI class method provides the full set of shutdown options supported by Win32 operating systems. Using Force in conjunction with Shutdown or Reboot on a remote computer immediately shuts down everything (including WMI, COM, and so on), or reboots the remote computer. This results in an indeterminate return value. Enumeration: 'reboot': 2, 'forceShutdown': 5, 'forcedPowerOff': 12, 'powerOff': 8, 'logOff': 0, 'forcedReboot': 6, 'forcedLogOff': 4, 'shutdown': 1.

Defines summary assessment information for the most recent formal assessment.

None

The value of this object uniquely identifies the instance entry for this class.

A score for the processors on the computer.

A score for the three-dimensional graphics (gaming) capabilities of the computer.

A score for the sequential read throughput on the primary hard disk on the computer.

A score for the graphics capabilities of the computer.

A score for the memory throughput and capacity of the computer.

This property must be set to 'MostRecentAssessment' in the WHERE clause of your WQL query.

State of the assessment. For a description of the possible values, see the WINSAT_ASSESSMENT_STATE enumeration. Enumeration: 'incoherentWithHardware': 2, 'valid': 1, 'noAssessmentAvailable': 3, 'stateUknown': 0, 'invalid': 4.

Base score for the computer. For details on the score value, see http://msdn2.microsoft.com/en-us/library/aa969193.a spx

The Processes subcategory groups classes that represent system processes and threads.

The Win32_Process WMI class represents a sequence of events on a Windows operating system. A descendent or member of this class is a sequence that consists of an interaction of one or more processors or interpreters, some executable code, and a set of inputs, for example, a client application running on a Windows system.

None

The value of this object uniquely identifies the instance entry for this class.

Short description of an object a one-line string.

Command line used to start a specific process, if applicable. This property is new for Windows XP.

Name of the first concrete class in the inheritance chain that is used to create an instance. You can use this property with other key properties of the class to identify uniquely all instances of the class and its subclasses. This property is inherited from CIM_System

Date the process begins executing.

Creation class name of the scoping computer system.

Name of the scoping computer system.

Description of an object.

Path to the executable file of the process. Example: C:\WINDOWS\EXPLORER.EXE

This property is not implemented and does not get populated for any instance of this class. This property is always NULL.

Process identifier.

Total number of open handles owned by the process. HandleCount is the sum of the handles currently open by each thread in this process. A handle is used to examine or modify the system resources. Each handle has an entry in a table that is maintained internally. Entries contain the addresses of the resources and data to identify the resource type.

Date an object is installed. The object may be installed without a value being written to this property.

Time in kernel mode, in 100 nanosecond units. If this information is not available, use a value of 0 (zero).

Maximum working set size of the process. The working set of a process is the set of memory pages visible to the process in physical RAM. These pages are resident, and available for an application to use without triggering a page fault. Example: 1413120

Minimum working set size of the process. The working set of a process is the set of memory pages visible to the process in physical RAM. These pages are resident and available for an application to use without triggering a page fault. Example: 20480

Label for an object. When inherited by a subclass, the property can be overridden to be a key property.

Creation class name of the scoping operating system.

Name of the scoping operating system.

Number of I/O operations performed that are not read or write operations.

Amount of data transferred during operations that are not read or write operations.

Number of page faults that a process generates. Example: 10

Amount of page file space that a process is using currently. Example: 102435

Unique identifier of the process that creates a process. Process identifier numbers are reused, so they only identify a process for the lifetime of that process. It is possible that the process identified by ParentProcessId is terminated, so ParentProcessId may not refer to a running process. It is also possible that ParentProcessId incorrectly refers to a process that reuses a process identifier. You can use the CreationDate property to determine whether the specified parent was created after the process represented by this Win32_Process instance was created.

Maximum amount of page file space used during the life of a process. Example: 102367

Maximum virtual address space a process uses at any one time. Using virtual address space does not necessarily imply corresponding use of either disk or main memory pages. However, virtual space is finite, and by using too much the process might not be able to load libraries.

Peak working set size of a process. Example: 1413120

Scheduling priority of a process within an operating system. The higher the value, the higher priority a process receives. Priority values can range from 0 (zero), which is the lowest priority to 31, which is highest priority. Example: 7

Current number of pages allocated that are accessible only to the process represented by this Win32_Process instance.

Global process identifier that you can use to identify a process. The value is valid from the time a process is created until it is terminated.

Quota amount of non-paged pool usage for a process. Example: 15

Quota amount of paged pool usage for a process. Example: 22

Peak quota amount of non-paged pool usage for a process. Example: 31

Peak quota amount of paged pool usage for a process. Example: 31

Number of read operations performed.

Amount of data read.

Unique identifier that an operating system generates when a session is created. A session spans a period of time from log on until log off from a specific system.

This property is not implemented and does not get populated for any instance of this class. It is always NULL.

Process was stopped or terminated. To get the termination time, a handle to the process must be held open. Otherwise, this property returns NULL.

Number of active threads in a process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes an instruction. Each running process has at least one thread. This property is for computers running Windows NT only.

Time in user mode, in 100 nanosecond units. If this information is not available, use a value of 0 (zero).

Current size of the virtual address space that a process is using. Using virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and by using too much, the process might not be able to load libraries.