WMI = Windows Management Instrumentation
WMI-path: %SystemRoot%\system32\wbem
WMI-Protocols: %SystemRoot%\system32\wbem\logs
# usefull wmi commands:
# mainboard information
wmic BASEBOARD get DESCRIPTION, MANUFACTURER, MODEL, NAME, PRODUCT
# another mainboard information
wmic BASEBOARD list /format:list
# BIOS information
wmic BIOS get PRIMARYBIOS, RELEASEDATE, SERIALNUMBER, VERSION
# BIOS information
wmic BIOS get SMBIOSBIOSVersion,SMBIOSMajorVersion,SMBIOSMinorVersion,SMBIOSPresent
# another BIOS information
wmic BIOS get CURRENTLANGUAGE, DESCRIPTION
# another BIOS information
wmic CPU get ADDRESSWIDTH, ARCHITECTURE, NAME, PROCESSORID, CAPTION, STATUS
# OS information
wmic OS get CAPTION, OSARCHITECTURE, SERIALNUMBER, VERSION
# another OS information
wmic OS get BUILDNUMBER, MUILANGUAGES, OSARCHITECTURE, OSLANGUAGE, OSPRODUCTSUITE, OSTYPE, VERSION
# another OS information
wmic OS get LASTBOOTUPTIME
# better use systeminfo
systeminfo | findstr /I Installation
# drive information
wmic DISKDRIVE get MODEL, SERIALNUMBER, INDEX, MEDIATYPE
# another drive information
wmic DISKDRIVE get NAME, MODEL, INTERFACETYPE, MEDIATYPE, SERIALNUMBER, PARTITIONS, STATUS
# partition information
wmic VOLUME get BlockSize, DriveType, "Serial Number"
# another partition information
wmic VOLUME get BOOTVOLUME, CAPACITY, CAPTION, SERIALNUMBER
# network information
wmic NIC get NAME, MACADDRESS
# another network information
wmic NICCONFIG where IPEnabled=True get DESCRIPTION, IPADDRESS, MACADDRESS
# installed updates and service packs
wmic QFE list brief | more
# or use powershell
Get-HotFix
# installed software (only 32bit)
wmic PRODUCT get NAME, VENDOR, VERSION, INSTALLDATE
# better use powershell
## get installed software, 64bit
powershell -command "Get-ChildItem -Path
HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ |
Get-ItemProperty | Select-Object DisplayName, DisplayVersion,
InstallDate | Sort displayname | Format-Table –AutoSize | Out-File
-FilePath %USERPROFILE%\Desktop\systeminfo1.txt -Append"
## get installed software, 32bit
powershell -command "Get-ChildItem -Path
HKLM:\SOFTWARE\Wow6432node\Microsoft\Windows\CurrentVersion\Uninstall |
Get-ItemProperty | Select-Object DisplayName, DisplayVersion,
InstallDate | Sort displayname | Format-Table –AutoSize | Out-File
-FilePath %USERPROFILE%\Desktop\systeminfo1.txt -Append"
# query Server remotly with Systeminfo
systeminfo /S <Servername> /U Administrator | findstr /i /c:Speicher
# type in your Password blind
# result:
Gesamter physischer
Speicher:
32.719 MB
Verfügbarer physischer
Speicher:
30.719 MB
Virtueller Arbeitsspeicher: Maximale Größe: 37.839 MB
Virtueller Arbeitsspeicher: Verfügbar: 35.890 MB
Virtueller Arbeitsspeicher: Zurzeit verwendet: 1.949 MB
# query Server remotely with WMIC
wmic /node:<Servername> /user:Administrator nicconfig where
ipenabled=true get ipaddress,ipsubnet,servicename,ipsubnet,macaddress
wmic /node:<Servername> /user:Administrator baseboard
wmic /node:<Servername> /user:administrator bios list /format:list
wmic /node:<Servername> /user:administrator diskdrive get Name,Model,SerialNumber,Size,Status