WMIC\u547d\u4ee4\u5927\u5168
\n \/NAMESPACE \u522b\u540d\u4f7f\u7528\u7684\u540d\u79f0\u7a7a\u95f4\u8def\u5f84\u3002
\n \/ROLE \u5305\u542b\u6b64\u522b\u540d\u5b9a\u4e49\u7684\u89d2\u8272\u8def\u5f84\u3002
\n \/NODE \u522b\u540d\u4f7f\u7528\u7684\u670d\u52a1\u5668\u3002
\n \/IMPLEVEL \u5ba2\u6237\u6a21\u62df\u7ea7\u522b\u3002
\n \/AUTHLEVEL \u5ba2\u6237\u8eab\u4efd\u9a8c\u8bc1\u7ea7\u522b\u3002
\n \/LOCALE \u5ba2\u6237\u5e94\u7528\u7684\u8bed\u8a00\u8bc6\u522b\u7b26\u3002
\n \/PRIVILEGES \u542f\u7528\u6216\u7981\u7528\u6240\u6709\u7279\u6743\u3002
\n \/TRACE \u5c06\u8c03\u8bd5\u4fe1\u606f\u8f93\u51fa\u5230 stderr\u3002
\n \/RECORD \u5c06\u6240\u6709\u8f93\u5165\u547d\u4ee4\u548c\u8f93\u51fa\u5199\u5165\u65e5\u5fd7\u3002
\n \/INTERACTIVE \u8bbe\u7f6e\u6216\u91cd\u8bbe\u4ea4\u4e92\u6a21\u5f0f\u3002
\n \/FAILFAST \u8bbe\u7f6e\u6216\u91cd\u7f6e FailFast \u6a21\u5f0f\u3002
\n \/USER \u4f1a\u8bdd\u671f\u95f4\u4f7f\u7528\u7684\u7528\u6237\u3002
\n \/PASSWORD \u7528\u4e8e\u4f1a\u8bdd\u767b\u5f55\u7684\u5bc6\u7801\u3002
\n \/OUTPUT \u4e3a\u8f93\u51fa\u91cd\u65b0\u5b9a\u5411\u6307\u5b9a\u6a21\u5f0f\u3002
\n \/APPEND \u4e3a\u8f93\u51fa\u91cd\u65b0\u5b9a\u5411\u6307\u5b9a\u6a21\u5f0f\u3002
\n \/AGGREGATE \u8bbe\u7f6e\u6216\u91cd\u7f6e\u96c6\u5408\u6a21\u5f0f\u3002
\n \/AUTHORITY Specifies the <authority
\n type> for the connection.
\n \/?[:<BRIEF|FULL>] \u7528\u6cd5\u4fe1\u606f\u3002<\/P><P>\u6709\u5173\u5177\u4f53\u5168\u5c40\u5f00\u5173\u7684\u4fe1\u606f\uff0c\u8bf7\u8f93\u5165:
\n switch-name \/?<\/P><P>
\n \u5f53\u524d\u89d2\u8272\u6709\u4e0b\u5217\u522b\u540d\u3002:
\n ALIAS – \u8bbf\u95ee\u672c\u5730\u673a\u5668\u4e0a\u7684\u522b\u540d
\n BASEBOARD – \u57fa\u677f (\u4e5f\u53eb\u6bcd\u677f\u6216\u7cfb\u7edf\u677f) \u7ba1\u7406\u3002
\n BIOS – \u57fa\u672c\u8f93\u5165\/\u8f93\u51fa\u670d\u52a1 (BIOS) \u7ba1\u7406\u3002
\n BOOTCONFIG – \u542f\u52a8\u914d\u7f6e\u7ba1\u7406\u3002
\n CDROM – CD-ROM \u7ba1\u7406\u3002
\n COMPUTERSYSTEM – \u8ba1\u7b97\u673a\u7cfb\u7edf\u7ba1\u7406\u3002
\n CPU – CPU \u7ba1\u7406\u3002
\n CSPRODUCT – SMBIOS \u7684\u8ba1\u7b97\u673a\u7cfb\u7edf\u4ea7\u54c1\u4fe1\u606f\u3002
\n DATAFILE – DataFile \u7ba1\u7406\u3002
\n DCOMAPP – DCOM \u7a0b\u5e8f\u7ba1\u7406\u3002
\n DESKTOP – \u7528\u6237\u684c\u9762\u7ba1\u7406\u3002
\n DESKTOPMONITOR – \u76d1\u89c6\u5668\u7ba1\u7406\u3002
\n DEVICEMEMORYADDRESS – \u8bbe\u5907\u5185\u5b58\u5730\u5740\u7ba1\u7406\u3002
\n DISKDRIVE – \u7269\u7406\u78c1\u76d8\u9a71\u52a8\u5668\u7ba1\u7406\u3002
\n DISKQUOTA – NTFS \u5377\u78c1\u76d8\u7a7a\u95f4\u4f7f\u7528\u60c5\u51b5\u3002
\n DMACHANNEL – \u76f4\u63a5\u5185\u5b58\u8bbf\u95ee(DMA)\u9891\u9053\u7ba1\u7406\u3002
\n ENVIRONMENT – \u7cfb\u7edf\u73af\u5883\u8bbe\u7f6e\u7ba1\u7406\u3002
\n FSDIR – \u6587\u4ef6\u76ee\u5f55\u7cfb\u7edf\u9879\u76ee\u7ba1\u7406\u3002
\n GROUP – \u7ec4\u5e10\u6237\u7ba1\u7406\u3002
\n IDECONTROLLER – IDE \u63a7\u5236\u5668\u7ba1\u7406\u3002
\n IRQ – \u95f4\u9694\u8bf7\u6c42\u7ebf (IRQ) \u7ba1\u7406\u3002
\n JOB – \u63d0\u4f9b\u5bf9\u4f7f\u7528\u8ba1\u5212\u670d\u52a1\u5b89\u6392\u7684\u5de5\u4f5c\u7684\u8bbf\u95ee\u3002
\n LOADORDER – \u5b9a\u4e49\u6267\u884c\u4f9d\u5b58\u7684\u7cfb\u7edf\u670d\u52a1\u7ba1\u7406\u3002
\n LOGICALDISK – \u672c\u5730\u50a8\u5b58\u8bbe\u5907\u7ba1\u7406\u3002
\n LOGON – \u767b\u5f55\u4f1a\u8bdd\u3002
\n MEMCACHE – \u7f13\u5b58\u5185\u5b58\u7ba1\u7406\u3002
\n MEMLOGICAL – \u7cfb\u7edf\u5185\u5b58\u7ba1\u7406 (\u914d\u7f6e\u5e03\u5c40\u548c\u5185\u5b58\u53ef\u7528\u6027)\u3002
\n MEMPHYSICAL – \u8ba1\u7b97\u673a\u7cfb\u7edf\u7269\u7406\u5185\u5b58\u7ba1\u7406\u3002
\n NETCLIENT – \u7f51\u7edc\u5ba2\u6237\u7aef\u7ba1\u7406\u3002
\n NETLOGIN – (\u67d0\u4e00\u7528\u6237\u7684)\u7f51\u7edc\u767b\u5f55\u4fe1\u606f\u7ba1\u7406\u3002
\n NETPROTOCOL – \u534f\u8bae (\u548c\u5176\u7f51\u7edc\u7279\u70b9) \u7ba1\u7406\u3002
\n NETUSE – \u6d3b\u52a8\u7f51\u7edc\u8fde\u63a5\u7ba1\u7406\u3002
\n NIC – \u7f51\u7edc\u754c\u9762\u63a7\u5236\u5668 (NIC) \u7ba1\u7406\u3002
\n NICCONFIG – \u7f51\u7edc\u9002\u914d\u5668\u7ba1\u7406\u3002
\n NTDOMAIN – NT \u57df\u7ba1\u7406\u3002
\n NTEVENT – NT \u4e8b\u4ef6\u65e5\u5fd7\u7684\u9879\u76ee
\n NTEVENTLOG – NT \u65f6\u95f4\u65e5\u5fd7\u6587\u4ef6\u7ba1\u7406\u3002
\n ONBOARDDEVICE – \u6bcd\u677f(\u7cfb\u7edf\u677f)\u5185\u7f6e\u666e\u901a\u8bbe\u9002\u914d\u5668\u8bbe\u5907\u7684\u7ba1\u7406\u3002
\n OS – \u5df2\u5b89\u88c5\u7684\u64cd\u4f5c\u7cfb\u7edf\u7ba1\u7406\u3002
\n PAGEFILE – \u865a\u62df\u5185\u5b58\u6587\u4ef6\u5bf9\u8c03\u7ba1\u7406\u3002
\n PAGEFILESET – \u9875\u9762\u6587\u4ef6\u8bbe\u7f6e\u7ba1\u7406\u3002
\n PARTITION – \u7269\u7406\u78c1\u76d8\u5206\u533a\u533a\u57df\u7684\u7ba1\u7406\u3002
\n PORT – I\/O \u7aef\u53e3\u7ba1\u7406\u3002
\n PORTCONNECTOR – \u7269\u7406\u8fde\u63a5\u7aef\u53e3\u7ba1\u7406\u3002
\n PRINTER – \u6253\u5370\u673a\u8bbe\u5907\u7ba1\u7406\u3002
\n PRINTERCONFIG – \u6253\u5370\u673a\u8bbe\u5907\u914d\u7f6e\u7ba1\u7406\u3002
\n PRINTJOB – \u6253\u5370\u5de5\u4f5c\u7ba1\u7406\u3002
\n PROCESS – \u8fdb\u7a0b\u7ba1\u7406\u3002
\n PRODUCT – \u5b89\u88c5\u5305\u4efb\u52a1\u7ba1\u7406\u3002
\n QFE – \u5feb\u901f\u6545\u969c\u6392\u9664\u3002
\n QUOTASETTING – \u8bbe\u7f6e\u5377\u7684\u78c1\u76d8\u914d\u989d\u4fe1\u606f\u3002
\n RECOVEROS – \u5f53\u64cd\u4f5c\u7cfb\u7edf\u5931\u8d25\u65f6\uff0c\u5c06\u4ece\u5185\u5b58\u6536\u96c6\u7684\u4fe1\u606f\u3002
\n REGISTRY – \u8ba1\u7b97\u673a\u7cfb\u7edf\u6ce8\u518c\u8868\u7ba1\u7406\u3002
\n SCSICONTROLLER – SCSI \u63a7\u5236\u5668\u7ba1\u7406\u3002
\n SERVER – \u670d\u52a1\u5668\u4fe1\u606f\u7ba1\u7406\u3002
\n SERVICE – \u670d\u52a1\u7a0b\u5e8f\u7ba1\u7406\u3002
\n SHARE – \u5171\u4eab\u8d44\u6e90\u7ba1\u7406\u3002
\n SOFTWAREELEMENT – \u5b89\u88c5\u5728\u7cfb\u7edf\u4e0a\u7684\u8f6f\u4ef6\u4ea7\u54c1\u5143\u7d20\u7684\u7ba1\u7406\u3002
\n SOFTWAREFEATURE – SoftwareElement \u7684\u8f6f\u4ef6\u4ea7\u54c1\u7ec4\u4ef6\u7684\u7ba1\u7406\u3002
\n SOUNDDEV – \u58f0\u97f3\u8bbe\u5907\u7ba1\u7406\u3002
\n STARTUP – \u7528\u6237\u767b\u5f55\u5230\u8ba1\u7b97\u673a\u7cfb\u7edf\u65f6\u81ea\u52a8\u8fd0\u884c\u547d\u4ee4\u7684\u7ba1\u7406\u3002
\n SYSACCOUNT – \u7cfb\u7edf\u5e10\u6237\u7ba1\u7406\u3002
\n SYSDRIVER – \u57fa\u672c\u670d\u52a1\u7684\u7cfb\u7edf\u9a71\u52a8\u7a0b\u5e8f\u7ba1\u7406\u3002
\n SYSTEMENCLOSURE – \u7269\u7406\u7cfb\u7edf\u5c01\u95ed\u7ba1\u7406\u3002
\n SYSTEMSLOT – \u5305\u62ec\u7aef\u53e3\u3001\u63d2\u53e3\u3001\u9644\u4ef6\u548c\u4e3b\u8981\u8fde\u63a5\u70b9\u7684\u7269\u7406\u8fde\u63a5\u70b9\u7ba1\u7406
\n TAPEDRIVE – \u78c1\u5e26\u9a71\u52a8\u5668\u7ba1\u7406\u3002
\n TEMPERATURE – \u6e29\u5ea6\u611f\u5e94\u5668\u7684\u6570\u636e\u7ba1\u7406 (\u7535\u5b50\u6e29\u5ea6\u8868)\u3002
\n TIMEZONE – \u65f6\u95f4\u533a\u57df\u6570\u636e\u7ba1\u7406\u3002
\n UPS – \u4e0d\u53ef\u4e2d\u65ad\u7684\u7535\u6e90\u4f9b\u5e94 (UPS) \u7ba1\u7406\u3002
\n USERACCOUNT – \u7528\u6237\u5e10\u6237\u7ba1\u7406\u3002
\n VOLTAGE – \u7535\u538b\u611f\u5e94\u5668 (\u7535\u5b50\u7535\u91cf\u8ba1) \u6570\u636e\u7ba1\u7406\u3002
\n VOLUMEQUOTASETTING – \u5c06\u67d0\u4e00\u78c1\u76d8\u5377\u4e0e\u78c1\u76d8\u914d\u989d\u8bbe\u7f6e\u5173\u8054\u3002
\n WMISET – WMI
\n \u670d\u52a1\u64cd\u4f5c\u53c2\u6570\u7ba1\u7406\u3002<\/P><P>\u6709\u5173\u5177\u4f53\u522b\u540d\u7684\u4fe1\u606f\uff0c\u8bf7\u8f93\u5165: alias \/?<\/P><P>CLASS
\n – \u6309 ESC \u952e\u56de\u5230\u5b8c\u6574\u7684 WMI \u67b6\u6784\u3002
\n PATH – \u6309 ESC \u952e\u56de\u5230\u5b8c\u6574\u7684 WMI \u5bf9\u8c61\u8def\u5f84\u3002
\n CONTEXT – \u663e\u793a\u6240\u6709\u5168\u5c40\u5f00\u5173\u7684\u72b6\u6001\u3002
\n QUIT\/EXIT – \u9000\u51fa\u6b64\u7a0b\u5e8f\u3002
\n—————————————
\nBIOS \u2013 \u57fa\u672c\u8f93\u5165\/\u8f93\u51fa\u670d\u52a1 (BIOS) \u7ba1\u7406
\n ::\u67e5\u770bbios\u7248\u672c\u578b\u53f7
\n wmic bios get Manufacturer,Name<\/p>\n
COMPUTERSYSTEM \u2013 \u8ba1\u7b97\u673a\u7cfb\u7edf\u7ba1\u7406
\n ::\u67e5\u770b\u7cfb\u7edf\u542f\u52a8\u9009\u9879,boot\u7684\u5185\u5bb9
\n wmic COMPUTERSYSTEM get SystemStartupOptions
\n ::\u67e5\u770b\u5de5\u4f5c\u7ec4\/\u57df
\n wmic computersystem get domain
\n ::\u66f4\u6539\u8ba1\u7b97\u673a\u540dabc\u4e3a123
\n wmic computersystem where \u201cname=\u2019abc\u2019\u201d call rename 123
\n ::\u66f4\u6539\u5de5\u4f5c\u7ec4google\u4e3aMyGroup
\n wmic computersystem where \u201cname=\u2019google\u2019\u201d call joindomainorworkgroup \u201c\u201d,\u201d",\u201dMyGroup\u201d,1<\/p>\n
CPU \u2013 CPU \u7ba1\u7406
\n ::\u67e5\u770bcpu\u578b\u53f7
\n wmic cpu get name<\/p>\n
DATAFILE \u2013 DataFile \u7ba1\u7406
\n ::\u67e5\u627ee\u76d8\u4e0btest\u76ee\u5f55(\u4e0d\u5305\u62ec\u5b50\u76ee\u5f55)\u4e0b\u7684cc.cmd\u6587\u4ef6
\n wmic datafile where \u201cdrive=\u2019e:\u2019 and path=\u2019\\\\test\\\\\u2019 and FileName=\u2019cc\u2019 and Extension=\u2019cmd\u2019\u201d list
\n ::\u67e5\u627ee\u76d8\u4e0b\u6240\u6709\u76ee\u5f55\u548c\u5b50\u76ee\u5f55\u4e0b\u7684cc.cmd\u6587\u4ef6,\u4e14\u6587\u4ef6\u5927\u5c0f\u5927\u4e8e1K
\n wmic datafile where \u201cdrive=\u2019e:\u2019 and FileName=\u2019cc\u2019 and Extension=\u2019cmd\u2019 and FileSize>\u20191000\u2032\u201d list
\n ::\u5220\u9664e\u76d8\u4e0b\u6587\u4ef6\u5927\u5c0f\u5927\u4e8e10M\u7684.cmd\u6587\u4ef6
\n wmic datafile where \u201cdrive=\u2019e:\u2019 and Extension=\u2019cmd\u2019 and FileSize>\u201910000000\u2032\u201d call delete
\n ::\u5220\u9664e\u76d8\u4e0btest\u76ee\u5f55(\u4e0d\u5305\u62ec\u5b50\u76ee\u5f55)\u4e0b\u7684\u975e.cmd\u6587\u4ef6
\n wmic datafile where \u201cdrive=\u2019e:\u2019 and Extension<>\u2019cmd\u2019 and path=\u2019test\u2019\u201d call delete
\n ::\u590d\u5236e\u76d8\u4e0btest\u76ee\u5f55(\u4e0d\u5305\u62ec\u5b50\u76ee\u5f55)\u4e0b\u7684cc.cmd\u6587\u4ef6\u5230e:\\,\u5e76\u6539\u540d\u4e3aaa.bat
\n wmic datafile where \u201cdrive=\u2019e:\u2019 and path=\u2019\\\\test\\\\\u2019 and FileName=\u2019cc\u2019 and Extension=\u2019cmd\u2019\u201d call copy \u201ce:\\aa.bat\u201d
\n ::\u6539\u540dc:\\hello.txt\u4e3ac:\\test.txt
\n wmic datafile \u201cc:\\\\hello.txt\u201d call rename c:\\test.txt
\n ::\u67e5\u627eh\u76d8\u4e0b\u76ee\u5f55\u542b\u6709test,\u6587\u4ef6\u540d\u542b\u6709perl,\u540e\u7f00\u4e3atxt\u7684\u6587\u4ef6
\n wmic datafile where \u201cdrive=\u2019h:\u2019 and extension=\u2019txt\u2019 and path like \u2018%\\\\test\\\\%\u2019 and filename like \u2018%perl%\u2019\u201d get name
\nDESKTOPMONITOR \u2013 \u76d1\u89c6\u5668\u7ba1\u7406
\n ::\u83b7\u53d6\u5c4f\u5e55\u5206\u8fa8\u7387
\n wmic DESKTOPMONITOR where Status=\u2019ok\u2019 get ScreenHeight,ScreenWidth<\/p>\n
DISKDRIVE \u2013 \u7269\u7406\u78c1\u76d8\u9a71\u52a8\u5668\u7ba1\u7406
\n ::\u83b7\u53d6\u7269\u7406\u78c1\u76d8\u578b\u53f7\u5927\u5c0f\u7b49
\n wmic DISKDRIVE get Caption,size,InterfaceType<\/p>\n
ENVIRONMENT \u2013 \u7cfb\u7edf\u73af\u5883\u8bbe\u7f6e\u7ba1\u7406
\n ::\u83b7\u53d6temp\u73af\u5883\u53d8\u91cf
\n wmic ENVIRONMENT where \u201cname=\u2019temp\u2019\u201d get UserName,VariableValue
\n ::\u66f4\u6539path\u73af\u5883\u53d8\u91cf\u503c,\u65b0\u589ee:\\tools
\n wmic ENVIRONMENT where \u201cname=\u2019path\u2019 and username=\u2019<system>\u2019\u201d set VariableValue=\u201d%path%;e:\\tools\u201d
\n ::\u65b0\u589e\u7cfb\u7edf\u73af\u5883\u53d8\u91cfhome,\u503c\u4e3a%HOMEDRIVE%%HOMEPATH%
\n wmic ENVIRONMENT create name=\u201dhome\u201d,username=\u201d<system>\u201d,VariableValue=\u201d%HOMEDRIVE%%HOMEPATH%\u201d
\n ::\u5220\u9664home\u73af\u5883\u53d8\u91cf
\n wmic ENVIRONMENT where \u201cname=\u2019home\u2019\u201d delete<\/p>\n
FSDIR \u2013 \u6587\u4ef6\u76ee\u5f55\u7cfb\u7edf\u9879\u76ee\u7ba1\u7406
\n ::\u67e5\u627ee\u76d8\u4e0b\u540d\u4e3atest\u7684\u76ee\u5f55
\n wmic FSDIR where \u201cdrive=\u2019e:\u2019 and filename=\u2019test\u2019\u201d list
\n ::\u5220\u9664e:\\test\u76ee\u5f55\u4e0b\u9664\u8fc7\u76ee\u5f55abc\u7684\u6240\u6709\u76ee\u5f55
\n wmic FSDIR where \u201cdrive=\u2019e:\u2019 and path=\u2019\\\\test\\\\\u2019 and filename<>\u2019abc\u2019\u201d call delete
\n ::\u5220\u9664c:\\good\u6587\u4ef6\u5939
\n wmic fsdir \u201cc:\\\\good\u201d call delete
\n ::\u91cd\u547d\u540dc:\\good\u6587\u4ef6\u5939\u4e3aabb
\n wmic fsdir \u201cc:\\\\good\u201d rename \u201cc:\\abb\u201d
\nLOGICALDISK \u2013 \u672c\u5730\u50a8\u5b58\u8bbe\u5907\u7ba1\u7406
\n ::\u83b7\u53d6\u786c\u76d8\u7cfb\u7edf\u683c\u5f0f\u3001\u603b\u5927\u5c0f\u3001\u53ef\u7528\u7a7a\u95f4\u7b49
\n wmic LOGICALDISK get name,Description,filesystem,size,freespace<\/p>\n
NIC \u2013 \u7f51\u7edc\u754c\u9762\u63a7\u5236\u5668 (NIC) \u7ba1\u7406<\/p>\n
OS \u2013 \u5df2\u5b89\u88c5\u7684\u64cd\u4f5c\u7cfb\u7edf\u7ba1\u7406
\n ::\u8bbe\u7f6e\u7cfb\u7edf\u65f6\u95f4
\n wmic os where(primary=1) call setdatetime 20070731144642.555555+480<\/p>\n
PAGEFILESET \u2013 \u9875\u9762\u6587\u4ef6\u8bbe\u7f6e\u7ba1\u7406
\n ::\u66f4\u6539\u5f53\u524d\u9875\u9762\u6587\u4ef6\u521d\u59cb\u5927\u5c0f\u548c\u6700\u5927\u503c
\n wmic PAGEFILESET set InitialSize=\u201d512\u2033,MaximumSize=\u201d512\u2033
\n ::\u9875\u9762\u6587\u4ef6\u8bbe\u7f6e\u5230d:\\\u4e0b,\u6267\u884c\u4e0b\u9762\u4e24\u6761\u547d\u4ee4
\n wmic pagefileset create name=\u2019d:\\pagefile.sys\u2019,initialsize=512,maximumsize=1024
\n wmic pagefileset where\u201dname=\u2019c:\\\\pagefile.sys\u2019\u201d delete<\/p>\n
PROCESS \u2013 \u8fdb\u7a0b\u7ba1\u7406
\n ::\u5217\u51fa\u8fdb\u7a0b\u7684\u6838\u5fc3\u4fe1\u606f,\u7c7b\u4f3c\u4efb\u52a1\u7ba1\u7406\u5668
\n wmic process list brief
\n ::\u7ed3\u675fsvchost.exe\u8fdb\u7a0b,\u8def\u5f84\u4e3a\u975eC:\\WINDOWS\\system32\\svchost.exe\u7684
\n wmic process where \u201cname=\u2019svchost.exe\u2019 and ExecutablePath<>\u2019C:\\\\WINDOWS\\\\system32\\\\svchost.exe\u2019\u201d call Terminate
\n ::\u65b0\u5efanotepad\u8fdb\u7a0b
\n wmic process call create notepad<\/p>\n
PRODUCT \u2013 \u5b89\u88c5\u5305\u4efb\u52a1\u7ba1\u7406
\n ::\u5b89\u88c5\u5305\u5728C:\\WINDOWS\\Installer\u76ee\u5f55\u4e0b
\n ::\u5378\u8f7d.msi\u5b89\u88c5\u5305
\n wmic PRODUCT where \u201cname=\u2019Microsoft .NET Framework 1.1\u2032 and Version=\u20191.1.4322\u2032\u201d call Uninstall
\n ::\u4fee\u590d.msi\u5b89\u88c5\u5305
\n wmic PRODUCT where \u201cname=\u2019Microsoft .NET Framework 1.1\u2032 and Version=\u20191.1.4322\u2032\u201d call Reinstall<\/p>\n
SERVICE \u2013 \u670d\u52a1\u7a0b\u5e8f\u7ba1\u7406
\n ::\u8fd0\u884cspooler\u670d\u52a1
\n wmic SERVICE where name=\u201dSpooler\u201d call startservice
\n ::\u505c\u6b62spooler\u670d\u52a1
\n wmic SERVICE where name=\u201dSpooler\u201d call stopservice
\n ::\u6682\u505cspooler\u670d\u52a1
\n wmic SERVICE where name=\u201dSpooler\u201d call PauseService
\n ::\u66f4\u6539spooler\u670d\u52a1\u542f\u52a8\u7c7b\u578b[auto|Disabled|Manual] \u91ca[\u81ea\u52a8|\u7981\u7528|\u624b\u52a8]
\n wmic SERVICE where name=\u201dSpooler\u201d set StartMode=\u201dauto\u201d
\n ::\u5220\u9664\u670d\u52a1
\n wmic SERVICE where name=\u201dtest123\u2033 call delete
\n \u6587\u7ae0\u5730\u5740:http:\/\/qlj.sh.cn\/system\/20090430\/wmic-command\/
\nSHARE \u2013 \u5171\u4eab\u8d44\u6e90\u7ba1\u7406
\n ::\u5220\u9664\u5171\u4eab
\n wmic SHARE where name=\u201de$\u201d call delete
\n ::\u6dfb\u52a0\u5171\u4eab
\n WMIC SHARE CALL Create \u201c\u201d,\u201dtest\u201d,\u201d3\u2033,\u201dTestShareName\u201d,\u201d",\u201dc:\\test\u201d,0<\/p>\n
SOUNDDEV \u2013 \u58f0\u97f3\u8bbe\u5907\u7ba1\u7406
\n wmic SOUNDDEV list<\/p>\n
STARTUP \u2013 \u7528\u6237\u767b\u5f55\u5230\u8ba1\u7b97\u673a\u7cfb\u7edf\u65f6\u81ea\u52a8\u8fd0\u884c\u547d\u4ee4\u7684\u7ba1\u7406
\n ::\u67e5\u770bmsconfig\u4e2d\u7684\u542f\u52a8\u9009\u9879
\n wmic STARTUP list<\/p>\n
SYSDRIVER \u2013 \u57fa\u672c\u670d\u52a1\u7684\u7cfb\u7edf\u9a71\u52a8\u7a0b\u5e8f\u7ba1\u7406
\n wmic SYSDRIVER list<\/p>\n
USERACCOUNT \u2013 \u7528\u6237\u5e10\u6237\u7ba1\u7406
\n ::\u66f4\u6539\u7528\u6237administrator\u5168\u540d\u4e3aadmin
\n wmic USERACCOUNT where name=\u201dAdministrator\u201d set FullName=\u201dadmin\u201d
\n ::\u66f4\u6539\u7528\u6237\u540dadmin\u4e3aadmin00
\n wmic useraccount where \u201cname=\u2019admin\u201d call Rename admin00<\/p>\n
\u5173\u4e8e WMIC \u7684\u4f7f\u7528
\n\u6700\u4f73\u64cd\u4f5c
\n\u5bf9\u4e3a\u522b\u540d\u8fd4\u56de\u7684\u7279\u5b9a\u5b9e\u4f8b\u4f7f\u7528 Where () \u5b50\u53e5\u3002
\n? Where() \u5b50\u53e5\u5fc5\u987b\u5305\u62ec Where \u5b50\u53e5\u4ee5\u8fdb\u884c\u6709\u6548\u7684 WQL \u67e5\u8be2\u3002\u53ea\u6709\u590d\u6742\u7684\u6761\u4ef6\u624d\u9700\u8981\u62ec\u53f7\u3002\u8bf7\u67e5\u770b WQL \u8bed\u6cd5\u7684 WMI SDK\u3002Where() \u5b50\u53e5\u5fc5\u987b\u7d27\u968f\u5728\u522b\u540d\u4e4b\u540e\u3002\u4f8b\u5982\uff1a process where (processID>300) list brief
\n? \u5f53 Where \u5b50\u53e5\u662f Where NAME=\u2019<value>\u2019 \u65f6\uff0c\u53ea\u63d0\u4f9b\u503c\u5c31\u8db3\u591f\u4e86\u3002\u4f8b\u5982\uff1a SERVICE CLIPSRV
\n\u4ee3\u66ff\uff1a
\nSERVICE Where NAME=\u2019CLIPSRV\u2019
\n\u4f7f\u7528 \/OUTPUT\u3001\/APPEND \u548c \/RECORD \u547d\u4ee4\u91cd\u5b9a\u5411\u8f93\u51fa\u3002
\n? \u4ee5 HTML \u683c\u5f0f\u8f93\u51fa\u7684\u547d\u4ee4\uff08\u5982 CLASS\uff09\u901a\u5e38\u5c06\u5b83\u4eec\u7684\u8f93\u51fa\u5b9a\u5411\u5230\u4e00\u4e2a\u6587\u4ef6\u3002\u7136\u540e\u53ef\u4ee5\u67e5\u770b\u8be5\u6587\u4ef6\uff0c\u4ee5\u4e86\u89e3\u547d\u4ee4\u7684\u7ed3\u679c\u3002\u53ef\u4ee5\u4f7f\u7528 \/OUTPUT\u3001\/APPEND \u548c \/RECORD \u547d\u4ee4\u91cd\u5b9a\u5411\u8f93\u51fa\u3002
\n\u5982\u679c\u503c\u5305\u542b\u7279\u6b8a\u5b57\u7b26\uff08\u77ed\u5212\u7ebf\u3001\u659c\u6760\u6216\u7a7a\u683c\uff09\uff0c\u5219\u8bf7\u7528\u5f15\u53f7\u5c06\u503c\u62ec\u8d77\u6765\u3002
\n\u5bf9\u4e8e\u5927\u7684\u57df\u6216\u6570\u636e\u5e93\uff0c\u8bf7\u4f7f\u7528\u4ee5\u4e0b\u67e5\u8be2\u7684\u65b9\u6cd5
\n? ALIAS
\nWMIC ALIAS PROCESS LIST BRIEF
\n? USERACCOUNT
\nWMIC USERACCOUNT Where \u201cName=\u2019PutUserNameHere\u2019 and Domain=\u2019PutDomainNameHere\u2019\u201d
\n? FSDIR
\nWMIC FSDIR Where Name=\u2019c:\\\\WINDOWS\u2019
\n? DATAFILE
\nWMIC DATAFILE Where Name=\u201dc:\\\\boot.ini\u201d WMIC DATAFILE Where \u201cPATH=\u2019\\\\windows\\\\\u2019 and Extension=\u2019exe\u2019 and FileSize>\u2019108032\u2032\u201d GET LastAccessed, LastModified, Name, FileSize
\n? NTEVENT
\nWMIC NTEVENT Where \u201cLogFile=\u2019system\u2019 and Type>\u20190\u2032\u201d GET Message, TimeGenerated WMIC NTEVENT Where \u201cLogFile=\u2019system\u2019 and Type>\u20190\u2032\u201d GET Message, TimeGenerated \/FORMAT:htable >c:\\MySystemEvents.htm
\n? \u67e5\u8be2\uff1a
\n\u4f7f\u7528\u5f15\u53f7 \u201c\u201d \u5c06 Where \u8868\u8fbe\u5f0f\u5206\u5f00\uff0c\u800c\u4e0d\u7528\u62ec\u53f7 ()\uff1a
\nWMIC NTEVENT Where \u201cLogFile=\u2019system\u2019 and Type>\u20194\u2032\u201d
\n[ \u6bd4\u8f83\uff1aWMIC NTEVENT Where (LogFile='system' and TYPE>4)
\n\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u547d\u4ee4\u884c\u89e3\u91ca\u5668\u5c06\u66f2\u89e3 ">4)"
\n\u5e76\u8bd5\u56fe\u5c06\u8f93\u51fa\u91cd\u5b9a\u5411\u5230\u6307\u5b9a\u6587\u4ef6 "4)" ]
\n\u5728\u4ea4\u4e92\u6a21\u5f0f\u4e0b\u8fd0\u884c WMIC
\n1.
\n\u5355\u51fb\u201c\u5f00\u59cb\u201d\uff0c\u7136\u540e\u5355\u51fb\u201c\u8fd0\u884c\u201d\u3002
\n2.
\n\u952e\u5165\uff1a
\nWMIC\uff0c\u7136\u540e\u6309 Enter\u3002
\n3.
\n\u952e\u5165\u5e0c\u671b WMIC \u6267\u884c\u7684\u522b\u540d\u3001\u547d\u4ee4\u6216\u5168\u5c40\u5f00\u5173\u3002
\n\u6ce8\u610f
\n? \u8981\u6267\u884c\u8be5\u8fc7\u7a0b\uff0c\u60a8\u5fc5\u987b\u662f\u672c\u5730\u8ba1\u7b97\u673a\u4e0a Administrators \u7ec4\u7684\u6210\u5458\uff0c\u6216\u8005\u60a8\u5fc5\u987b\u88ab\u59d4\u6d3e\u4e86\u9002\u5f53\u7684\u6743\u9650\u3002\u5982\u679c\u8ba1\u7b97\u673a\u5df2\u52a0\u5165\u67d0\u4e2a\u57df\uff0c\u5219 Domain Admins \u7ec4\u7684\u6210\u5458\u53ef\u80fd\u4f1a\u6267\u884c\u8be5\u8fc7\u7a0b\u3002\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u9ed8\u8ba4\u672c\u5730\u7ec4\u548c\u9ed8\u8ba4\u7ec4\u3002
\n? \u5728\u4ea4\u4e92\u6a21\u5f0f\u4e0b\u4f7f\u7528\u5b8c WMIC \u4e4b\u540e\uff0c\u53ef\u4ee5\u4f7f\u7528 Exit \u6216 Quit \u547d\u4ee4\u9000\u51fa WMIC\u3002
\n? \u6709\u5173 WMIC \u547d\u4ee4\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u5728\u547d\u4ee4\u63d0\u793a\u7b26\u5904\u952e\u5165 \/?\u3002
\n\u5728\u975e\u4ea4\u4e92\u6a21\u5f0f\u4e0b\u8fd0\u884c WMIC
\n1.
\n\u6253\u5f00\u201c\u547d\u4ee4\u63d0\u793a\u7b26\u201d\u3002
\n2.
\n\u5728\u547d\u4ee4\u63d0\u793a\u7b26\u4e0b\uff0c\u952e\u5165\uff1a
\nWMIC
\n\u548c\u5e0c\u671b WMIC \u6267\u884c\u7684\u547d\u4ee4\u3001\u522b\u540d\u6216\u5168\u5c40\u5f00\u5173\u3002
\n3.
\n\u6309 Enter\u3002
\n\u6ce8\u610f
\n\u8981\u6267\u884c\u8be5\u8fc7\u7a0b\uff0c\u60a8\u5fc5\u987b\u662f\u672c\u5730\u8ba1\u7b97\u673a\u4e0a Administrators \u7ec4\u7684\u6210\u5458\uff0c\u6216\u8005\u60a8\u5fc5\u987b\u88ab\u59d4\u6d3e\u4e86\u9002\u5f53\u7684\u6743\u9650\u3002\u5982\u679c\u8ba1\u7b97\u673a\u5df2\u52a0\u5165\u67d0\u4e2a\u57df\uff0c\u5219 Domain Admins \u7ec4\u7684\u6210\u5458\u53ef\u80fd\u4f1a\u6267\u884c\u8be5\u8fc7\u7a0b\u3002\u4f5c\u4e3a\u5b89\u5168\u6027\u6700\u4f73\u64cd\u4f5c\uff0c\u8bf7\u8003\u8651\u4f7f\u7528\u201c\u8fd0\u884c\u65b9\u5f0f\u201d\u6267\u884c\u6b64\u8fc7\u7a0b\u3002\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u9ed8\u8ba4\u672c\u5730\u7ec4\u3001\u9ed8\u8ba4\u7ec4\u4ee5\u53ca\u4f7f\u7528\u8fd0\u884c\u65b9\u5f0f\u3002
\n\u8981\u6253\u5f00\u547d\u4ee4\u63d0\u793a\u7b26\u7a97\u53e3\uff0c\u8bf7\u5355\u51fb\u201c\u5f00\u59cb\u201d\uff0c\u4f9d\u6b21\u6307\u5411\u201c\u6240\u6709\u7a0b\u5e8f\u201d\u3001\u201c\u9644\u4ef6\u201d\uff0c\u7136\u540e\u5355\u51fb\u201c\u547d\u4ee4\u63d0\u793a\u7b26\u201d\u3002
\n\u5728\u975e\u4ea4\u4e92\u5f0f\u6a21\u5f0f\u4e0b\uff0cWMIC \u5728\u6267\u884c\u4e00\u4e2a\u547d\u4ee4\u4e4b\u540e\u8fd4\u56de\u5230\u547d\u4ee4\u63d0\u793a\u7b26\u3002
\n\u6709\u5173 WMIC \u547d\u4ee4\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u5728\u547d\u4ee4\u63d0\u793a\u7b26\u5904\u952e\u5165 WMIC \/?\u3002
\nWMIC \u7684\u5b89\u5168\u6027
\n\u6709\u5173\u5b89\u5168\u6a21\u5f0f\u7684\u4e00\u822c\u4fe1\u606f
\n\u53ea\u6709\u672c\u5730 Administrators \u7ec4\u7684\u7528\u6237\u624d\u53ef\u4ee5\u542f\u52a8 WMIC\u3002\u5728\u4efb\u4f55\u4ece WMIC \u5230 WMI \u7684\u8c03\u7528\u4e2d\u90fd\u4f1a\u5f3a\u5236\u6267\u884c WMI \u5b89\u5168\u8bbf\u95ee\u6a21\u578b\u3002\u64cd\u4f5c\u7cfb\u7edf\u5bf9\u4e8e\u901a\u8fc7 WMI \u6267\u884c\u7684\u4efb\u4f55\u64cd\u4f5c\u5747\u5f3a\u5236\u5b9e\u65bd\u64cd\u4f5c\u7cfb\u7edf\u7ea7\u522b\u7684\u5b89\u5168\u6027\u3002\u4f8b\u5982\uff0c\u60a8\u4e0d\u80fd\u901a\u8fc7 WMI \u8bbf\u95ee\u60a8\u4e0d\u80fd\u4ece Windows \u8d44\u6e90\u7ba1\u7406\u5668\u8bbf\u95ee\u7684\u6587\u4ef6\u3002
\nWMIC \u662f WMI \u7684\u5ba2\u6237\u7aef\uff0c\u56e0\u6b64\u6240\u6709\u5b89\u5168\u68c0\u67e5\u90fd\u5728 WMI \u7ec4\u4ef6\u5185\u8fdb\u884c\u3002\u5728\u8fde\u63a5\u5230\u8fdc\u7a0b\u8ba1\u7b97\u673a\u4e4b\u524d\uff0c\u7ec4\u4ef6\u4f7f\u7528 PING \u529f\u80fd\u9a8c\u8bc1\u8f93\u5165\u7684\u6709\u6548\u6027\uff08\u8fdc\u7a0b\u8ba1\u7b97\u673a\u72b6\u6001\uff09\u3002
\n\u5f53 WMIC \u5728 Telnet\u3001\u7ec8\u7aef\u670d\u52a1\u6216\u76f8\u4f3c\u4f1a\u8bdd\u4e2d\u4f7f\u7528\u65f6\uff0c\u6240\u6709\u547d\u4ee4\u90fd\u5c06\u5728\u53d1\u5e03\u8be5\u547d\u4ee4\u7684\u7528\u6237\u73af\u5883\u4e2d\u6267\u884c\u3002
\nWMIC \u5141\u8bb8\u5bf9\u522b\u540d\u548c XSL \u8fdb\u884c\u6269\u5c55\u3002\u5b89\u5168\u6027\u662f\u901a\u8fc7 NTFS \u89e3\u51b3\u7684\uff0c\u8be5\u6587\u4ef6\u7cfb\u7edf\u5bf9\u8bbf\u95ee WMIC \u7684\u6587\u4ef6\u7684\u64cd\u4f5c\u5b9e\u65bd\u4ec5\u9650\u7ba1\u7406\u5458\u7684\u51ed\u636e\u8981\u6c42\u3002
\n\u9664\u65b9\u6cd5\u53c2\u6570\u4ee5\u5916\uff0cWMIC \u8fd8\u5141\u8bb8\u53ea\u901a\u8fc7 \/NODE \u5f00\u5173\u8fdb\u884c\u6570\u636e\u8f93\u5165\u3002\u53ef\u4ee5\u4f7f\u7528 @FileList \u9009\u9879\u4f5c\u4e3a\u4e00\u4e2a\u6587\u672c\u6587\u4ef6\u63d0\u4f9b\u8ba1\u7b97\u673a\u8282\u70b9\u7684\u5217\u8868\u3002\u6587\u4ef6\u4ee5\u53ca\u5176\u4f4d\u7f6e\u5e94\u7531\u7ba1\u7406\u5458\u8fdb\u884c\u4fdd\u62a4\uff0c\u5e76\u4e14\u8f93\u5165\u6587\u4ef6\u6700\u597d\u5e94\u4ece WBEM \u76ee\u5f55\u4e2d\u8bfb\u53d6\u3002
\n\u7528\u6237\u6743\u9650
\n\u4e0d\u9700\u8981\u7279\u6b8a\u7684\u7528\u6237\u6743\u9650\u5373\u53ef\u8fd0\u884c WMIC\u3002\u542b\u84c4\u5730\u8bf4\uff0c\u4e3a\u4e86\u80fd\u591f\u4f7f\u7528 WMIC\uff0c\u7528\u6237\u9700\u8981\u6709\u5bf9 WMIC \u540d\u79f0\u7a7a\u95f4\u548c\u4e24\u4e2a\u6ce8\u518c\u8868\u9879\uff08HKLM\\Software\\Microsoft\\WBEM \u548c HKLM\\Software\\Microsoft\\WBEM\\WMIC\uff09\u7684\u5b8c\u5168\u5199\u5165\u8bbf\u95ee\u6743\u3002
\n\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743
\n\u5f53\u8fd9\u4e9b\u8d44\u6e90\u88ab\u6253\u5f00\u65f6\uff0c\u7cfb\u7edf\u5c06\u63d0\u4f9b\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\u3002\u5b83\u4eec\u5b58\u50a8\u5728\u5b89\u5168\u7684\u4f4d\u7f6e\uff0c\u5e76\u4f7f\u7528\u968f\u673a\u8bbf\u95ee\u63a7\u5236\u5217\u8868 (DACL) \u9a8c\u8bc1\u5ba2\u6237\u7aef\u662f\u5426\u5177\u6709\u5bf9\u5b83\u4eec\u8fdb\u884c\u8bbf\u95ee\u7684\u6743\u9650\u3002\u5b83\u4eec\u5b8c\u5168\u4f9d\u8d56\u4e8e\u5206\u5e03\u5f0f\u7ec4\u4ef6\u5bf9\u8c61\u6a21\u578b (DCOM) \u5b89\u5168\u6027\u4ee5\u53ca Windows \u7ba1\u7406 (WINMGMT) \u8fdb\u884c\u8fdc\u7a0b\u8bbf\u95ee\uff0c\u63d0\u4f9b\u6240\u9700\u8981\u7684\u7528\u6237\u540d\u3001\u5bc6\u7801\u548c\u6240\u8bf7\u6c42\u7684\u7ea7\u522b\u3002\u53ef\u4ee5\u4f7f\u7528 \/AUTHLEVEL \u5f00\u5173\u4fdd\u62a4 WMIC \u7f51\u7edc\u901a\u4fe1\u7684\u5b89\u5168\u3002\u5728 Windows Server 2003 \u5bb6\u65cf\u64cd\u4f5c\u7cfb\u7edf\u4e2d\uff0c\u9ed8\u8ba4\u7ea7\u522b\u8bbe\u7f6e\u4e3a PKTPRIVACY\uff0c\u5b83\u63d0\u4f9b\u6570\u636e\u5305\u9690\u79c1\u6027\u52a0\u5bc6\u7ea7\u522b\u3002\u53ef\u4ee5\u4f7f\u7528 \/AUTHLEVEL \u5f00\u5173\u4fee\u6539\u8eab\u4efd\u9a8c\u8bc1\u7ea7\u522b\u3002
\n\u793a\u4f8b\uff1a
\nWMIC \/AUTHLEVEL:Pktprivacy \/NODE:\u201dtestcomputer.microsoft.com\u201d BIOS
\n\u914d\u7f6e\u6570\u636e
\n\u914d\u7f6e\u4fe1\u606f\u5b58\u50a8\u5728\u6ce8\u518c\u8868\u548c WMI \u50a8\u5907\u5e93\u4e2d\u3002\u6ce8\u518c\u8868\u914d\u7f6e\u4fdd\u5b58\u4e86\u6709\u5173\u67b6\u6784\u7684\u91c7\u7528\u6258\u7ba1\u5bf9\u8c61\u683c\u5f0f (MOF) \u7f16\u8bd1\u7684\u72b6\u6001\u7684\u65f6\u95f4\u6233\u548c\u6709\u6548\u6027\u3002\u5728 WMIC \u7684\u6bcf\u4e00\u4e2a\u4f1a\u8bdd\u5f00\u59cb\u65f6\uff0c\u5c06\u5bf9\u6b64\u4fe1\u606f\u8fdb\u884c\u8bc4\u4f30\uff0c\u5f53\u67b6\u6784\u65e0\u6548\u6216\u5df2\u88ab\u4e00\u4e2a\u7528\u6237\u66f4\u65b0\u65f6\uff0cWMIC \u5c06\u66f4\u65b0 WMI \u50a8\u5907\u5e93\u3002
\n\u6742\u9879
\nWMIC \u662f\u4e00\u4e2a\u529f\u80fd\u5f3a\u5927\u7684\u547d\u4ee4\u884c\u5de5\u5177\uff0c\u901a\u8fc7\u8be5\u5de5\u5177\uff0c\u60a8\u53ef\u4ee5\u5f88\u5feb\u5730\u6267\u884c\u60a8\u6709\u6743\u9650\u6267\u884c\u7684\u4efb\u4f55\u4efb\u52a1\u3002\u5982\u679c\u60a8\u4e0d\u719f\u6089 WMI \u73af\u5883\uff0c\u53ef\u4ee5\u4f7f\u7528 \/INTERACTIVE \u5f00\u5173\u4e3a\u5220\u9664\u64cd\u4f5c\u8bbe\u7f6e\u4e00\u4e2a\u8b66\u544a\u3002\u4f8b\u5982\uff1a
\nWMI \/INTERACTIVE:ON
\n\u4e0b\u5217\u547d\u4ee4\u5728\u4efb\u4f55\u65f6\u5019\u90fd\u53ef\u4ee5\u4f7f\u7528\uff1a
\nCLASS \u9000\u51fa WMIC \u7684\u9ed8\u8ba4\u522b\u540d\u6a21\u5f0f\u5e76\u4ee5 WMI \u67b6\u6784\u76f4\u63a5\u8bbf\u95ee\u7c7b\u3002
\nPATH \u9000\u51fa WMIC \u7684\u9ed8\u8ba4\u522b\u540d\u6a21\u5f0f\u5e76\u4ee5 WMI \u67b6\u6784\u76f4\u63a5\u8bbf\u95ee\u5b9e\u4f8b\u3002
\nCONTEXT \u663e\u793a\u6240\u6709\u5168\u5c40\u5f00\u5173\u7684\u5f53\u524d\u503c\u3002
\nQUIT \u9000\u51fa WMIC\u3002
\nEXIT \u9000\u51fa WMIC<\/p>\n
WMIC\u5728\u6279\u5904\u7406\u7684\u5e94\u7528\u5b9e\u4f8b(\u8f6c)
\n\u7b2c\u4e00\u6b21\u4f7f\u7528WMI\u4f1a\u81ea\u52a8\u5b89\u88c5\uff0c\u7b49\u5f85\u6570\u79d2\u5373\u53ef\u6b63\u5e38\u4f7f\u7528\u3002
\nwmic \u83b7\u53d6\u786c\u76d8\u56fa\u5b9a\u5206\u533a\u76d8\u7b26:
\nfor \/f \u201cskip=1\u2033 %%i in (\u2018wmic logicaldisk where \u201cdrivetype=3\u2033 get name\u2019) do @echo %%i
\n\u7b80\u8981\u8bf4\u660e:
\nwmic + \u6b32\u64cd\u4f5c\u7684\u5bf9\u8c61\u540d+ where \u4ece\u53e5(\u8fd9\u662f\u7b5b\u9009\u6761\u4ef6)+ get + \u5bf9\u8c61\u7684\u5c5e\u6027
\n\u8fd9\u6837\u7684\u683c\u5f0f\u5df2\u7ecf\u53ef\u4ee5\u5e2e\u52a9\u6211\u4eec\u83b7\u53d6\u5f88\u591a\u4e1c\u897f\u4e86\uff0c\u5927\u5bb6\u53ef\u4ee5\u5177\u4f53\u53c2\u8003
\n\u67e5\u770bwmic\u5bf9\u8c61\uff1a wmic \/?
\n\u67e5\u770bwmic\u5bf9\u8c61\u6709\u4f55\u53ef\u7528\u5c5e\u6027: wmic \u5bf9\u8c61\u540d\u79f0 get \/? \u4f8b\u5982 wmic process get \/?
\n\u67e5\u770bwmic\u5bf9\u8c61\u67d0\u4e2a\u5c5e\u6027\u7684\u503c: wmic \u5bf9\u8c61\u540d\u79f0 get \u5bf9\u8c61\u67d0\u4e2a\u5c5e\u6027 \u4f8b\u5982 wmic process get name
\nps: \u4ee5\u4e0a\u4f8b\u5b50\u4e2d\u7684drivetype\u7684\u503c\u4e3a2 \u8868\u793a\u53ef\u79fb\u52a8\u78c1\u76d8\u6216\u8f6f\u76d8\uff0c\u503c\u4e3a3\u8868\u793a\u56fa\u5b9a\u78c1\u76d8\uff0c\u503c\u4e3a5\u8868\u793a\u5149\u9a71\u3002
\nwmic \u83b7\u53d6\u8fdb\u7a0b\u540d\u79f0\u3001\u53ef\u6267\u884c\u8def\u5f84\u3001\u5220\u9664\u3001\u521b\u5efa\u6307\u5b9a\u8fdb\u7a0b
\n:
\nwmic \u83b7\u53d6\u8fdb\u7a0b\u540d\u79f0\u4ee5\u53ca\u53ef\u6267\u884c\u8def\u5f84:
\nwmic process get name,executablepath
\nwmic \u5220\u9664\u6307\u5b9a\u8fdb\u7a0b(\u6839\u636e\u8fdb\u7a0b\u540d\u79f0):
\nwmic process where name=\u201dqq.exe\u201d call terminate
\n\u6216\u8005\u7528
\nwmic process where name=\u201dqq.exe\u201d delete
\nwmic \u5220\u9664\u6307\u5b9a\u8fdb\u7a0b(\u6839\u636e\u8fdb\u7a0bPID):
\nwmic process where pid=\u201d123\u2033 delete
\nwmic \u521b\u5efa\u65b0\u8fdb\u7a0b
\nwmic process call create \u201cC:\\Program Files\\Tencent\\QQ\\QQ.exe\u201d
\n\u5176\u5b9e\u90fd\u5f88\u5bb9\u6613\u4e0a\u624b\u7684\uff0c\u5927\u5bb6\u591a\u7528\u7528\u5c31\u4f1a\u719f\u6089\u8fd9\u79cd\u6a21\u5f0f\u4e86
\n\u8be6\u7ec6\u4fe1\u606f\u7528 wmic process get \/? \u67e5\u770b\u6240\u6709\u53ef\u7528\u7684\u5c5e\u6027
\nwmic \u64cd\u4f5c\u8fdc\u7a0b\u8ba1\u7b97\u673a\u4e0a\u7684\u7a0b\u5e8f
\n\u5728\u8fdc\u7a0b\u673a\u5668\u4e0a\u521b\u5efa\u65b0\u8fdb\u7a0b\uff1a\uff082003\u7cfb\u7edf\uff09
\nwmic \/node:192.168.1.10 \/user:administrator \/password:123456 process call create cmd.exe
\n\u5173\u95ed\u672c\u5730\u8ba1\u7b97\u673a
\nwmic process call create shutdown.exe
\n\u91cd\u542f\u8fdc\u7a0b\u8ba1\u7b97\u673a \uff082003\u7cfb\u7edf\uff09
\nwmic \/node:192.168.1.10\/user:administrator \/password:123456 process call create \u201cshutdown.exe -r -f -m\u201d
\nwmic \u64cd\u4f5c\u8ba1\u7b97\u673a\u540d\u79f0\u548c\u7528\u6237\u5e10\u6237
\n\u66f4\u6539\u8ba1\u7b97\u673a\u540d\u79f0
\nwmic computersystem where \u201ccaption=\u2019%ComputerName%\u2019\u201d call rename newcomputername
\n\u66f4\u6539\u5e10\u6237\u540d
\nwmic USERACCOUNT where \u201cname=\u2019%UserName%\u2019\u201d call rename newUserName
\nwmic \u7ed3\u675f\u53ef\u7591\u8fdb\u7a0b\uff08\u6839\u636e\u8fdb\u7a0b\u7684\u542f\u52a8\u8def\u5f84\uff09
\nwmic process where \u201cname=\u2019explorer.exe\u2019 and executablepath<>C:\\\\WINDOWS\\\\windows\\\\explorer.exe\u2019\u201d delete
\nwmic \u83b7\u53d6\u7269\u7406\u5185\u5b58http:\/\/qlj.sh.cn\/system\/20090430\/wmic-command\/
\nwmic memlogical get TotalPhysicalMemory|find \/i \/v \u201ct\u201d
\nwmic \u83b7\u53d6\u6587\u4ef6\u7684\u521b\u5efa\u3001\u8bbf\u95ee\u3001\u4fee\u6539\u65f6\u95f4 (tvzml\u7ea0\u6b63)
\n@echo off
\nfor \/f \u201cskip=1 tokens=1,3,5 delims=. \u201d %%a in (\u2018wmic datafile where name^=\u201dC:\\\\WINDOWS\\\\NOTEPAD.EXE\u201d get CreationDate^,LastAccessed^,LastModified\u2019) do set a=%%a & set b=%%b & set c=%%c
\necho \u6587\u4ef6\u540d\u79f0: %WINDIR%\\NOTEPAD.EXE
\necho \u521b\u5efa\u65f6\u95f4: %a:~0,4%\u5e74%a:~4,2%\u6708%a:~6,2%\u65e5, %a:~8,2%:%a:~10,2%:%a:~12,2%
\necho \u4fee\u6539\u65f6\u95f4: %c:~0,4%\u5e74%c:~4,2%\u6708%c:~6,2%\u65e5, %c:~8,2%:%c:~10,2%:%c:~12,2%
\necho \u8bbf\u95ee\u65f6\u95f4: %b:~0,4%\u5e74%b:~4,2%\u6708%b:~6,2%\u65e5, %b:~8,2%:%b:~10,2%:%b:~12,2%
\npause
\nwmic \u5168\u76d8\u641c\u7d22\u67d0\u6587\u4ef6\u5e76\u83b7\u53d6\u8be5\u6587\u4ef6\u6240\u5728\u76ee\u5f55
\nfor \/f \u201cskip=1 tokens=1*\u201d %i in (\u2018wmic datafile where \u201cFileName=\u2019qq\u2019 and extension=\u2019exe\u2019\u201d get drive^,path\u2019) do (set \u201cqPath=%i%j\u201d&@echo %qPath:~0,-3%)
\nwmic \u83b7\u53d6\u5c4f\u5e55\u5206\u8fa8\u7387
\nwmic DESKTOPMONITOR where Status=\u2019ok\u2019 get ScreenHeight,ScreenWidth
\n\u66f4\u6539\u5f53\u524d\u9875\u9762\u6587\u4ef6\u521d\u59cb\u5927\u5c0f\u548c\u6700\u5927\u503c,\u91cd\u542f\u8ba1\u7b97\u673a\u540e\u751f\u6548
\nwmic PageFileSet set InitialSize=\u201d512\u2033,MaximumSize=\u201d512\u2033
\n\u8bbe\u7f6e\u865a\u62df\u5185\u5b58\u5230E\u76d8\uff0c\u5e76\u5220\u9664C\u76d8\u4e0b\u7684\u9875\u9762\u6587\u4ef6,\u91cd\u542f\u8ba1\u7b97\u673a\u540e\u751f\u6548
\nwmic PageFileSet create name=\u201dE:\\\\pagefile.sys\u201d,InitialSize=\u201d1024\u2033,MaximumSize=\u201d1024\u2033
\nwmic PageFileSet where \u201cname=\u2019C:\\\\pagefile.sys\u2019\u201d delete
\n\u83b7\u5f97\u8fdb\u7a0b\u5f53\u524d\u5360\u7528\u7684\u5185\u5b58\u548c\u6700\u5927\u5360\u7528\u5185\u5b58\u7684\u5927\u5c0f\uff1a
\nwmic process where caption=\u2019filename.exe\u2019 get WorkingSetSize,PeakWorkingSetSize
\nwmic \u83b7\u53d6\u8fdb\u7a0b\u540d\u79f0\u4ee5\u53ca\u53ef\u6267\u884c\u8def\u5f84:
\nwmic process get name,executablepath
\nwmic \u5220\u9664\u6307\u5b9a\u8fdb\u7a0b(\u6839\u636e\u8fdb\u7a0b\u540d\u79f0):
\nwmic process where name="qq.exe" call terminate
\n\u6216\u8005\u7528
\nwmic process where name="qq.exe" delete
\nwmic process where HandleCount=32 call GetOwner
\n\u83b7\u53d6\u7528\u6237\u4fe1\u606f
\nwmic \u5220\u9664\u6307\u5b9a\u8fdb\u7a0b(\u6839\u636e\u8fdb\u7a0bPID):
\nwmic process where pid="123" delete
\nwmic \u521b\u5efa\u65b0\u8fdb\u7a0b
\nwmic process call create "C:\\Program Files\\Tencent\\QQ\\QQ.exe"
\n\u5728\u8fdc\u7a0b\u673a\u5668\u4e0a\u521b\u5efa\u65b0\u8fdb\u7a0b\uff1a
\nwmic \/node:192.168.1.10 \/user:administrator \/password:123456 process call create cmd.exe
\n\u84dd\u5c4f\u5173\u673a
\nwmic process where HandleCount!="0" delete \/nointeractive
\n\u5173\u95ed\u672c\u5730\u8ba1\u7b97\u673a
\nwmic process call create shutdown.exe
\n\u91cd\u542f\u8fdc\u7a0b\u8ba1\u7b97\u673a
\nwmic \/node:192.168.1.10\/user:administrator \/password:123456 process call create "shutdown.exe -r -f -m"
\n\u66f4\u6539\u8ba1\u7b97\u673a\u540d\u79f0
\nwmic computersystem where "caption='%ComputerName%'" call rename newcomputername
\n\u66f4\u6539\u5e10\u6237\u540d
\nwmic USERACCOUNT where "name='%UserName%'" call rename newUserName
\nwmic \u7ed3\u675f\u53ef\u7591\u8fdb\u7a0b\uff08\u6839\u636e\u8fdb\u7a0b\u7684\u542f\u52a8\u8def\u5f84\uff09
\nwmic process where "name='explorer.exe' and executablepath<>'%SystemDrive%\\\\windows\\\\explorer.exe'" delete
\nwmic \u83b7\u53d6\u7269\u7406\u5185\u5b58
\nwmic memlogical get TotalPhysicalMemory|find \/i \/v "t"
\nwmic \u83b7\u53d6\u6587\u4ef6\u7684\u521b\u5efa\u3001\u8bbf\u95ee\u3001\u4fee\u6539\u65f6\u95f4
\n@echo off
\nfor \/f "skip=1 tokens=1,3,5 delims=. " %%a in ('wmic datafile where name^="c:\\\\windows\\\\system32
\n\\\\notepad.exe" get CreationDate^,LastAccessed^,LastModified') do (
\nset a=%%a
\nset b=%%b
\nset c=%%c
\necho \u6587\u4ef6: c:\\windows\\system32\\notepad.exe
\necho.
\necho \u521b\u5efa\u65f6\u95f4: %a:~0,4% \u5e74 %a:~4,2% \u6708 %a:~6,2% \u65e5 %a:~8,2% \u65f6 %a:~10,2% \u5206 %a:~12,2% \u79d2
\necho \u6700\u540e\u8bbf\u95ee: %b:~0,4% \u5e74 %b:~4,2% \u6708 %b:~6,2% \u65e5 %b:~8,2% \u65f6 %b:~10,2% \u5206 %b:~12,2% \u79d2
\necho \u6700\u540e\u4fee\u6539: %c:~0,4% \u5e74 %c:~4,2% \u6708 %c:~6,2% \u65e5 %c:~8,2% \u65f6 %c:~10,2% \u5206 %c:~12,2% \u79d2
\n)
\necho.
\npause
\nwmic \u5168\u76d8\u641c\u7d22\u67d0\u6587\u4ef6\u5e76\u83b7\u53d6\u8be5\u6587\u4ef6\u6240\u5728\u76ee\u5f55
\nfor \/f "skip=1 tokens=1*" %i in ('wmic datafile where "FileName='qq' and extension='exe'" get drive^,path')
\ndo (set "qPath=%i%j"&@echo %qPath:~0,-3%)
\n\u83b7\u53d6\u5c4f\u5e55\u5206\u8fa8\u7387 wmic DESKTOPMONITOR where Status='ok' get ScreenHeight,ScreenWidth
\nwmic PageFileSet set InitialSize="512",MaximumSize="512"
\n\u8bbe\u7f6e\u865a\u62df\u5185\u5b58\u5230E\u76d8\uff0c\u5e76\u5220\u9664C\u76d8\u4e0b\u7684\u9875\u9762\u6587\u4ef6,\u91cd\u542f\u8ba1\u7b97\u673a\u540e\u751f\u6548
\nwmic PageFileSet create name="E:\\\\pagefile.sys",InitialSize="1024",MaximumSize="1024"
\nwmic PageFileSet where "name='C:\\\\pagefile.sys'" delete
\n\u83b7\u5f97\u8fdb\u7a0b\u5f53\u524d\u5360\u7528\u7684\u5185\u5b58\u548c\u6700\u5927\u5360\u7528\u5185\u5b58\u7684\u5927\u5c0f\uff1a
\nwmic process where caption='filename.exe' get WorkingSetSize,PeakWorkingSetSize
\n\u4ee5KB\u4e3a\u5355\u4f4d\u663e\u793a
\n@echo off
\nfor \/f "skip=1 tokens=1-2 delims= " %%a in ('wmic process where caption^="conime.exe" get
\nWorkingSetSize^,PeakWorkingSetSize') do (
\nset \/a m=%%a\/1024
\nset \/a mm=%%b\/1024
\necho \u8fdb\u7a0bconime.exe\u73b0\u5728\u5360\u7528\u5185\u5b58\uff1a%m%K\uff1b\u6700\u9ad8\u5360\u7528\u5185\u5b58\uff1a%mm%K
\n)
\npause
\n\u8fdc\u7a0b\u6253\u5f00\u8ba1\u7b97\u673a\u8fdc\u7a0b\u684c\u9762
\nwmic \/node:%pcname% \/USER:%pcaccount% PATH win32_terminalservicesetting Where (__Class!="") CALL
\nSetAllowTSConnections 1
\nwmic \u83b7\u53d6\u8fdb\u7a0b\u540d\u79f0\u4ee5\u53ca\u53ef\u6267\u884c\u8def\u5f84
\nwmic process get name,executablepath
\nwmic \u5220\u9664\u6307\u5b9a\u8fdb\u7a0b(\u6839\u636e\u8fdb\u7a0b\u540d\u79f0)
\nwmic process where name=qq.exe call terminate
\n\u6216\u8005\u7528
\nwmic process where name=qq.exe delete
\nwmic \u5220\u9664\u6307\u5b9a\u8fdb\u7a0b(\u6839\u636e\u8fdb\u7a0bPID)
\nwmic process where pid=123 delete
\nwmic \u521b\u5efa\u65b0\u8fdb\u7a0b
\nwmic process call create CProgram FilesTencentQQQQ.exe
\n\u5728\u8fdc\u7a0b\u673a\u5668\u4e0a\u521b\u5efa\u65b0\u8fdb\u7a0b\uff1a
\nwmic node192.168.1.10 useradministrator password123456 process call create cmd.exe
\n\u5173\u95ed\u672c\u5730\u8ba1\u7b97\u673a
\nwmic process call create shutdown.exe
\n\u91cd\u542f\u8fdc\u7a0b\u8ba1\u7b97\u673a
\nwmic node192.168.1.10useradministrator password123456 process call create shutdown.exe -r -f -m
\n\u66f4\u6539\u8ba1\u7b97\u673a\u540d\u79f0
\nwmic computersystem where caption='%ComputerName%' call rename newcomputername
\n\u66f4\u6539\u5e10\u6237\u540d
\nwmic USERACCOUNT where name='%UserName%' call rename newUserName
\nwmic \u7ed3\u675f\u53ef\u7591\u8fdb\u7a0b\uff08\u6839\u636e\u8fdb\u7a0b\u7684\u542f\u52a8\u8def\u5f84\uff09
\nwmic process where name='explorer.exe' and executablepath'%SystemDrive%windowsexplorer.exe' delete
\nwmic \u83b7\u53d6\u7269\u7406\u5185\u5b58
\nwmic memlogical get TotalPhysicalMemoryfind i v t
\nwmic \u83b7\u53d6\u6587\u4ef6\u7684\u521b\u5efa\u3001\u8bbf\u95ee\u3001\u4fee\u6539\u65f6\u95f4
\n@echo off
\nfor f skip=1 tokens=1,3,5 delims=. %%a in ('wmic datafile where name^=cwindowssystem32notepad.exe get CreationDate^,LastAccessed^,LastModified') do (
\nset a=%%a
\nset b=%%b
\nset c=%%c
\necho \u6587\u4ef6 cwindowssystem32notepad.exe
\necho.
\necho \u521b\u5efa\u65f6\u95f4 %a~0,4% \u5e74 %a~4,2% \u6708 %a~6,2% \u65e5 %a~8,2% \u65f6 %a~10,2% \u5206 %a~12,2% \u79d2
\necho \u6700\u540e\u8bbf\u95ee %b~0,4% \u5e74 %b~4,2% \u6708 %b~6,2% \u65e5 %b~8,2% \u65f6 %b~10,2% \u5206 %b~12,2% \u79d2
\necho \u6700\u540e\u4fee\u6539 %c~0,4% \u5e74 %c~4,2% \u6708 %c~6,2% \u65e5 %c~8,2% \u65f6 %c~10,2% \u5206 %c~12,2% \u79d2
\n)
\necho.
\npause
\nwmic \u5168\u76d8\u641c\u7d22\u67d0\u6587\u4ef6\u5e76\u83b7\u53d6\u8be5\u6587\u4ef6\u6240\u5728\u76ee\u5f55
\nfor f skip=1 tokens=1 %i in ('wmic datafile where FileName='qq' and extension='exe' get drive^,path') do (set qPath=%i%j&@echo %qPath~0,-3%)
\n\u83b7\u53d6\u5c4f\u5e55\u5206\u8fa8\u7387 wmic DESKTOPMONITOR where Status='ok' get ScreenHeight,ScreenWidth
\nwmic PageFileSet set InitialSize=512,MaximumSize=512
\n\u8bbe\u7f6e\u865a\u62df\u5185\u5b58\u5230E\u76d8\uff0c\u5e76\u5220\u9664C\u76d8\u4e0b\u7684\u9875\u9762\u6587\u4ef6,\u91cd\u542f\u8ba1\u7b97\u673a\u540e\u751f\u6548
\nwmic PageFileSet create name=Epagefile.sys,InitialSize=1024,MaximumSize=1024
\nwmic PageFileSet where name='Cpagefile.sys' delete
\n\u83b7\u5f97\u8fdb\u7a0b\u5f53\u524d\u5360\u7528\u7684\u5185\u5b58\u548c\u6700\u5927\u5360\u7528\u5185\u5b58\u7684\u5927\u5c0f\uff1a
\nwmic process where caption='filename.exe' get WorkingSetSize,PeakWorkingSetSize
\n\u4ee5KB\u4e3a\u5355\u4f4d\u663e\u793a
\n@echo off
\nfor f skip=1 tokens=1-2 delims= %%a in ('wmic process where caption^=conime.exe get WorkingSetSize^,PeakWorkingSetSize') do (
\nset a m=%%a1024
\nset a mm=%%b1024
\necho \u8fdb\u7a0bconime.exe\u73b0\u5728\u5360\u7528\u5185\u5b58\uff1a%m%K\uff1b\u6700\u9ad8\u5360\u7528\u5185\u5b58\uff1a%mm%K
\n)
\npause
\n\u8fdc\u7a0b\u6253\u5f00\u8ba1\u7b97\u673a\u8fdc\u7a0b\u684c\u9762
\nwmic node%pcname% USER%pcaccount% PATH win32_terminalservicesetting Where (__Class!=) CALL SetAllowTSConnections 1<\/p>\n
\u68c0\u6d4b\u662f\u5426\u63d2\u5165U\u76d8\u7684\u6279\u5904\u7406
\n@echo off<\/p>\n
\u7528WMIC\u7684\u65f6\u5019\uff0c\u6709\u65f6\u5019\u9700\u8981\u6a21\u7cca\u67e5\u8be2\uff0c\u627e\u4e86\u8bb8\u4e45\u7ec8\u4e8e\u627e\u5230\u4e86\u53c2\u6570\uff0c\u4e0b\u9762\u5c31\u662f\u4e00\u4e2a\u4f8b\u5b50\uff1a
\nservice where caption like '%wireless%' list<\/p>\n","protected":false},"excerpt":{"rendered":"
WMIC\u547d\u4ee4\u5927\u5168 \/NAMESPACE \u522b\u540d\u4f7f\u7528\u7684\u540d\u79f0\u7a7a\u95f4\u8def\u5f84\u3002 \/ROLE \u5305\u542b\u6b64\u522b\u540d\u5b9a\u4e49\u7684\u89d2\u8272\u8def\u5f84\u3002 \/N […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[178],"tags":[226],"_links":{"self":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts\/144"}],"collection":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=144"}],"version-history":[{"count":1,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts\/144\/revisions"}],"predecessor-version":[{"id":229,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts\/144\/revisions\/229"}],"wp:attachment":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=144"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=144"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=144"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}