Scribd Logo
Upload

Welcome to Scribd!

  • 212 views

    WMIC Quick Start

    Uploaded by

    gradien

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    WMIC Quick Start

    Uploaded by

    gradien
    212 views3 pages

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    212 views3 pages

    WMIC Quick Start

    Uploaded by

    gradien

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 3

    WMIC Quick Start Page 1

    wmic - windows management interface


    wmic.exe is the command line interface to the WMI APP's.

    wmic.exe is available on Windows XP Pro. It is not available on Windows 2000 or XP Home.

    Here are two good examples of usage:

    C:\>wmic process get workingsetsize,commandline /format:csv

    This lists the program and the memory usage

    C:\>wmic process | sort

    alg.exe C:\WINDOWS\System32\alg.exe
    ccApp.exe "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    ccEvtMgr.exe "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
    ccSetMgr.exe "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
    cmd.exe "C:\WINDOWS\system32\cmd.exe"
    csrss.exe C:\WINDOWS\system32\csrss.exe \
    DefWatch.exe "C:\Program Files\Symantec AntiVirus\DefWatch.exe"
    explorer.exe C:\WINDOWS\Explorer.EXE
    lsass.exe C:\WINDOWS\system32\lsass.exe
    mozilla.exe "C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE" -turbo
    nvsvc32.exe C:\WINDOWS\system32\nvsvc32.exe
    pine.exe "D:\Program Files\pine\pine.exe"
    Rtvscan.exe "C:\Program Files\Symantec AntiVirus\Rtvscan.exe"
    rundll32.exe "C:\WINDOWS\system32\RUNDLL32.EXE" \
    services.exe C:\WINDOWS\system32\services.exe
    smss.exe \SystemRoot\System32\smss.exe
    sort.exe sort
    spoolsv.exe C:\WINDOWS\system32\spoolsv.exe
    svchost.exe C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe C:\WINDOWS\system32\svchost -k rpcss
    svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalService
    svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe C:\WINDOWS\System32\svchost.exe -k NetworkService
    VPTray.exe "C:\PROGRA~1\SYMANT~1\VPTray.exe"
    wdfmgr.exe C:\WINDOWS\system32\wdfmgr.exe
    winlogon.exe winlogon.exe
    wmic.exe wmic process
    wmiprvse.exe C:\WINDOWS\System32\wbem\wmiprvse.exe

    C:\>wmic

    wmic:root\cli>partition get name,bootable,size,type


    Bootable Name Size Type
    TRUE Disk #0, Partition #0 4194860544 Installable File System
    Disk #0, Partition #1 9475522560 Extended Partition
    TRUE Disk #1, Partition #0 8389753344 Unknown
    Disk #1, Partition #1 11630545920 Unknown

    http://people.virginia.edu/~rtg2t/winadmin/wmic.html 1/2/2012 3:03:31 PM


    WMIC Quick Start Page 2

    More Examples
    wmic diskdrive get name,size,model

    Model Name Size


    Hitachi HTS721080G9AT00 \\.\PHYSICALDRIVE0 80023749120

    wmic partition get name,size,type

    Name Size Type


    Disk #0, Partition #0 65769984 Unknown
    Disk #0, Partition #1 79957946880 Installable File System

    wmic bios get name,serialnumber,version

    Name SerialNumber Version


    Phoenix ROM BIOS PLUS Version 1.10 A06 99L9891 DELL - 27d50a02

    SerialNumber is the Dell Service Tag

    wmic csproduct get name,vendor,identifyingNumber

    IdentifyingNumber Name Vendor


    99L9891 Latitude D610 Dell Inc.

    yet another service tag report

    wmic qfe get description,installedOn /format:csv

    This produces a long list of Windows Patches and when they were installed

    PCPC3-D610,Security Update for Windows XP (KB929969),3/14/2007


    PCPC3-D610,Security Update for Windows XP (KB930178),4/11/2007
    PCPC3-D610,Update for Windows XP (KB930916),5/10/2007
    PCPC3-D610,Security Update for Windows XP (KB931261),4/11/2007
    PCPC3-D610,Security Update for Windows XP (KB931768),5/10/2007
    PCPC3-D610,Security Update for Windows XP (KB931784),4/11/2007
    PCPC3-D610,Update for Windows XP (KB931836),3/14/2007
    PCPC3-D610,Security Update for Windows XP (KB932168),4/11/2007
    PCPC3-D610,Update for Windows XP (KB933360),8/29/2007
    PCPC3-D610,Security Update for Windows XP (KB933566),6/18/2007
    PCPC3-D610,Security Update for Windows XP (KB935839),6/18/2007
    PCPC3-D610,Security Update for Windows XP (KB935840),6/18/2007
    PCPC3-D610,Security Update for Windows XP (KB936021),8/15/2007
    PCPC3-D610,Update for Windows XP (KB936357),7/12/2007
    PCPC3-D610,Security Update for Windows XP (KB937143),8/15/2007
    PCPC3-D610,Security Update for Windows XP (KB938127),8/15/2007
    PCPC3-D610,Update for Windows XP (KB938828),8/15/2007
    PCPC3-D610,Security Update for Windows XP (KB938829),8/15/2007

    http://people.virginia.edu/~rtg2t/winadmin/wmic.html 1/2/2012 3:03:31 PM


    WMIC Quick Start Page 3

    PCPC3-D610,XML Paper Specification Shared Components Pack 1.0,

    wmic COMPUTERSYSTEM get TotalPhysicalMemory,caption

    Caption TotalPhysicalMemory
    PCPC3-D610 1073074176

    wmic nic get macaddress,description

    Description MACAddress
    Infrared Port
    Bluetooth Device (Personal Area Network) 00:xxxxxxxxxxx:19
    RAS Async Adapter
    WAN Miniport (L2TP)
    WAN Miniport (PPTP) 50:xxxxxxxxxxx:30
    WAN Miniport (PPPOE) 33:xxxxxxxxxxx:30
    Direct Parallel
    WAN Miniport (IP)
    Packet Scheduler Miniport 8C:xxxxxxxxxxx:53
    Intel(R) PRO/Wireless 215ABG Network Connection
    Packet Scheduler Miniport
    Broadcom NetXtreme 57xx Gigabit Controller 00:xxxxxxxxxxx:C4
    Packet Scheduler Miniport 00:xxxxxxxxxxx:C4

    Remote wmi Use


    Connecting to WMI on a Remote Computer

    http://people.virginia.edu/~rtg2t/winadmin/wmic.html 1/2/2012 3:03:31 PM

    You might also like