Anticlue

How do I write a WMI script?

This is a nice little tool, the windows scriptomatic utility. It writes window management instrumentation scripts.

So how to exploit it, first get a text file together of the computer names you would like to investigate. Lets call it asset.txt and save it in C:\scripts.

Then let's ascertain the information, one wants to capture. I'm currently interested in the page file. Just select Win32_PageFile, and the script generator creates the following.

On Error Resume Next
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_PageFile",,48)
For Each objItem in colItems
Wscript.Echo "AccessMask: " & objItem.AccessMask
Wscript.Echo "Archive: " & objItem.Archive
Wscript.Echo "Caption: " & objItem.Caption
Wscript.Echo "Compressed: " & objItem.Compressed
Wscript.Echo "CompressionMethod: " & objItem.CompressionMethod
Wscript.Echo "CreationClassName: " & objItem.CreationClassName
Wscript.Echo "CreationDate: " & objItem.CreationDate
Wscript.Echo "CSCreationClassName: " & objItem.CSCreationClassName
Wscript.Echo "CSName: " & objItem.CSName
Wscript.Echo "Description: " & objItem.Description
Wscript.Echo "Drive: " & objItem.Drive
Wscript.Echo "EightDotThreeFileName: " & objItem.EightDotThreeFileName
Wscript.Echo "Encrypted: " & objItem.Encrypted
Wscript.Echo "EncryptionMethod: " & objItem.EncryptionMethod
Wscript.Echo "Extension: " & objItem.Extension
Wscript.Echo "FileName: " & objItem.FileName
Wscript.Echo "FileSize: " & objItem.FileSize
Wscript.Echo "FileType: " & objItem.FileType
Wscript.Echo "FreeSpace: " & objItem.FreeSpace
Wscript.Echo "FSCreationClassName: " & objItem.FSCreationClassName
Wscript.Echo "FSName: " & objItem.FSName
Wscript.Echo "Hidden: " & objItem.Hidden
Wscript.Echo "InitialSize: " & objItem.InitialSize
Wscript.Echo "InstallDate: " & objItem.InstallDate
Wscript.Echo "InUseCount: " & objItem.InUseCount
Wscript.Echo "LastAccessed: " & objItem.LastAccessed
Wscript.Echo "LastModified: " & objItem.LastModified
Wscript.Echo "Manufacturer: " & objItem.Manufacturer
Wscript.Echo "MaximumSize: " & objItem.MaximumSize
Wscript.Echo "Name: " & objItem.Name
Wscript.Echo "Path: " & objItem.Path
Wscript.Echo "Readable: " & objItem.Readable
Wscript.Echo "Status: " & objItem.Status
Wscript.Echo "System: " & objItem.System
Wscript.Echo "Version: " & objItem.Version
Wscript.Echo "Writeable: " & objItem.Writeable
Next

So let's wrap and cut this down, so we only get what we want.

Dim oFSO, txt, strComputer
Set oFSO = CreateObject("Scripting.FileSystemObject")
Set txt = oFSO.OpenTextFile("C:\scripts\assets.txt")

Do Until txt.AtEndOfStream
strComputer = txt.ReadLine
WScript.Echo vbCrLf & "Working with " & strComputer

On Error Resume Next
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_PageFile",,48)
For Each objItem in colItems
Wscript.Echo "Drive: " & objItem.Drive
Wscript.Echo "FileName: " & objItem.FileName
Wscript.Echo "FileSize: " & objItem.FileSize
Next

Loop

WScript.Echo "Completed, Life is good"