WMI - Windows Management Instrumentation - BATCH SCRIPTS

jcgriff2 · Aug 17, 2012

WMI can help you obtain extremely detailed info about a system.

A list of Windows Updates/ Hotfixes -

Bring up an elevated Admin CMD prompt -
START | type cmd.exe into the start search box | right-click on cmd.exe | select 'Run as Administrator' | type/ paste:

Code:

wmic qfe list full /format:htable > "%userprofile%\documents\0.html" & start "%programfiles%\internet explorer\iexplore" "%userprofile%\documents\0.html"

It may take a few seconds to run.

Sample output - Windows 7 x64 SP1 - https://www.sysnative.com/apps/wmihtml/hotfixes.html

Regards. . .

jcgriff2

Code:

wmic product list full /format:htable >"%userprofile%\desktop\WMI_product_.html" & start /b "IE" "%programfiles%\internet explorer\iexplore" "%userprofile%\desktop\WMI_product_.html"

-k

Code:

wmic product list full /format:htable >"%userprofile%\desktop\WMI_product_.html" & start /b "IE" "%programfiles%\internet explorer\iexplore" -k "%userprofile%\desktop\WMI_product_.html"

Short CSV vers -

Code:

wmic product get name,version /format:csv > c:\wmic2.csv

Code:

wmic product get name,version /format:htable > c:\wmic2.hml

jcgriff2 · Aug 17, 2012

WMI LOADORDER - Management of system services that define execution dependencies.

Code:

wmic loadorder list full /format:htable > "%userprofile%\documents\0.html" & start "%programfiles%\internet explorer\iexplore" "%userprofile%\documents\0.html"

Sample output - https://www.sysnative.com/apps/wmihtml/WMI_loadorder_.html

http://msdn.microsoft.com/en-us/library/windows/hardware/ff552319(v=vs.85).aspx

SysInternals LoadOrd lists drivers & services - http://live.sysinternals.com/LoadOrd.exe

Sample output -

Code:

[FONT=lucida console]Boot DSF 2 DSFKSVCS Kernel Services for DSF
Boot WdfLoadGroup n/a* Wdf01000 Kernel Mode Driver Frameworks service
Boot Boot Bus Extender 1 ACPI Microsoft ACPI Driver
Boot Boot Bus Extender 2 msisadrv 
Boot Boot Bus Extender 3 pci PCI Bus Driver
Boot Boot Bus Extender 6 vdrvroot Microsoft Virtual Drive Enumerator Driver
Boot Boot Bus Extender n/a* partmgr @%SystemRoot%\system32\drivers\partmgr.sys,-100
Boot System Bus Extender 7 Compbatt Microsoft Composite Battery Driver
Boot System Bus Extender 9 volmgr Volume Manager Driver
Boot System Bus Extender 10 volmgrx @%SystemRoot%\system32\drivers\volmgrx.sys,-100
Boot System Bus Extender n/a* mountmgr @%SystemRoot%\system32\drivers\mountmgr.sys,-100
Boot System Bus Extender n/a* vmbus @%SystemRoot%\system32\vmbusres.dll,-1000
Boot SCSI Miniport 33 atapi IDE Channel
Boot SCSI Miniport 64 msahci 
Boot SCSI miniport n/a* amdxata 
Boot FSFilter Infrastructure 1 FltMgr @%SystemRoot%\system32\drivers\fltmgr.sys,-10001
Boot FSFilter Bottom n/a* FileInfo @%SystemRoot%\system32\drivers\fileinfo.sys,-100
Boot Filter 1 CLFS @%SystemRoot%\system32\clfs.sys,-100
Boot Base 1 KSecDD 
Boot Base 2 CNG 
Boot Base n/a* pcw Performance Counters for Windows Driver
Boot File System n/a* Fs_Rec 
Boot NDIS Wrapper n/a* NDIS @%SystemRoot%\system32\drivers\ndis.sys,-200
Boot Cryptography 2 KSecPkg 
Boot PNP_TDI 3 Tcpip @%SystemRoot%\system32\tcpipcfg.dll,-50003
Boot Extended Base 20 dsfroot root enumerated bus driver
Boot Extended Base n/a* storflt @%SystemRoot%\system32\vmstorfltres.dll,-1000
Boot n/a* n/a* Disk Disk Driver
Boot PnP Filter* 5* fvevol @%SystemRoot%\system32\drivers\fvevol.sys,-100
Boot PnP Filter* 6* hpdskflt HP Filter
Boot n/a* n/a* hwpolicy @%systemroot%\system32\drivers\hwpolicy.sys,-101
Boot Network* n/a* Mup @%systemroot%\system32\drivers\mup.sys,-101
Boot PnP Filter* 2* rdyboost ReadyBoost
Boot n/a* n/a* speedfan speedfan
Boot n/a* n/a* spldr Security Processor Loader Driver
Boot n/a* n/a* volsnap Storage volumes
System SCSI CDROM Class 3 cdrom CD-ROM Driver
System Base 1 Null 
System Base 2 Beep Beep
System Base 28 ehdrv ehdrv
System Video Save 1 VgaSave 
System Video Save n/a* RDPCDD @%systemroot%\system32\DRIVERS\RDPCDD.sys,-100
System Video Save n/a* RDPENCDD @%systemroot%\system32\drivers\RDPENCDD.sys,-101
System Video Save n/a* RDPREFMP @%systemroot%\system32\drivers\RdpRefMp.sys,-101
System File system n/a* Msfs 
System File system n/a* Npfs 
System PNP_TDI 4 tdx @%SystemRoot%\system32\tcpipcfg.dll,-50004
System PNP_TDI n/a* AFD @%systemroot%\system32\drivers\afd.sys,-1000
System PNP_TDI n/a* NetBT @%SystemRoot%\system32\drivers\netbt.sys,-2
System NDIS 16 WfpLwf WFP Lightweight Filter
System NDIS 18 Psched @%SystemRoot%\System32\drivers\pacer.sys,-101
System NDIS 25 vwififlt Virtual WiFi Filter Driver
System NetBIOSGroup 2 NetBIOS NetBIOS Interface
System n/a* n/a* blbdrive 
System network* 9* CSC @%systemroot%\system32\cscsvc.dll,-202
System Network* n/a* DfsC @%systemroot%\system32\drivers\dfsc.sys,-101
System n/a* n/a* discache @%systemroot%\system32\drivers\discache.sys,-102
System n/a* n/a* ISODrive ISO DVD/CD-ROM Device Driver
System n/a* n/a* mssmbios Microsoft System Management BIOS Driver
System n/a* n/a* nsiproxy @%SystemRoot%\system32\drivers\nsiproxy.sys,-2
System Network* 4* rdbss @%systemroot%\system32\wkssvc.dll,-1000
System n/a* n/a* TermDD Terminal Device Driver
System n/a* n/a* Wanarpv6 @%systemroot%\system32\rascfg.dll,-32012
Automatic FSFilter Virtualization n/a* luafv @%systemroot%\system32\drivers\luafv.sys,-100
Automatic FSFilter Anti-Virus 6 eamonm eamonm
Automatic Video n/a* NVSvc NVIDIA Display Driver Service
Automatic COM Infrastructure n/a* DcomLaunch @oleres.dll,-5012
Automatic COM Infrastructure n/a* RpcEptMapper @%windir%\system32\RpcEpMap.dll,-1001
Automatic COM Infrastructure n/a* RpcSs @oleres.dll,-5010
Automatic Event Log n/a* eventlog @%SystemRoot%\system32\wevtsvc.dll,-200
Automatic AudioGroup n/a* AudioEndpointBuilder @%SystemRoot%\system32\audiosrv.dll,-204
Automatic AudioGroup n/a* AudioSrv @%SystemRoot%\system32\audiosrv.dll,-200
Automatic AudioGroup n/a* STacSV Audio Service
Automatic ProfSvc_Group n/a* gpsvc @gpapi.dll,-112
Automatic profsvc_group n/a* ProfSvc @%systemroot%\system32\profsvc.dll,-300
Automatic ProfSvc_Group n/a* SENS @%SystemRoot%\system32\Sens.dll,-200
Automatic ProfSvc_Group n/a* Themes @%SystemRoot%\System32\themeservice.dll,-8192
Automatic UIGroup n/a* hpsrv HP Service
Automatic UIGroup n/a* UxSms @%SystemRoot%\system32\dwm.exe,-2000
Automatic MS_WindowsLocalValidation n/a* SamSs @%SystemRoot%\system32\samsrv.dll,-1
Automatic PlugPlay n/a* PlugPlay @%SystemRoot%\system32\umpnpmgr.dll,-100
Automatic Plugplay n/a* Power @%SystemRoot%\system32\umpo.dll,-100
Automatic PlugPlay n/a* wudfsvc @%SystemRoot%\system32\wudfsvc.dll,-1000
Automatic NDIS 14 rspndr Link-Layer Topology Discovery Responder
Automatic NDIS 15 lltdio Link-Layer Topology Discovery Mapper I/O Driver
Automatic TDI n/a* Dhcp @%SystemRoot%\system32\dhcpcore.dll,-100
Automatic TDI n/a* Dnscache @%SystemRoot%\System32\dnsapi.dll,-101
Automatic TDI n/a* lmhosts @%SystemRoot%\system32\lmhsvc.dll,-101
Automatic TDI n/a* Wlansvc @%SystemRoot%\System32\wlansvc.dll,-257
Automatic ShellSvcGroup n/a* ShellHWDetection @%SystemRoot%\System32\shsvcs.dll,-12288
Automatic SchedulerGroup n/a* Schedule @%SystemRoot%\system32\schedsvc.dll,-100
Automatic SpoolerGroup n/a* Spooler @%systemroot%\system32\spoolsv.exe,-1
Automatic NetworkProvider n/a* BFE @%SystemRoot%\system32\bfe.dll,-1001
Automatic NetworkProvider n/a* LanmanWorkstation @%systemroot%\system32\wkssvc.dll,-100
Automatic NetworkProvider n/a* MpsSvc Windows Firewall
Automatic n/a* n/a* AESTFilters Andrea ST Filters Service
Automatic n/a* n/a* BITS Background Intelligent Transfer Service
Automatic n/a* n/a* clr_optimization_v4.0.30319_32 Microsoft .NET Framework NGEN v4.0.30319_X86
Automatic n/a* n/a* clr_optimization_v4.0.30319_64 Microsoft .NET Framework NGEN v4.0.30319_X64
Automatic n/a* n/a* cpuz135 cpuz135
Automatic n/a* n/a* CryptSvc @%SystemRoot%\system32\cryptsvc.dll,-1001
Automatic n/a* n/a* DPS @%systemroot%\system32\dps.dll,-500
Automatic n/a* n/a* EFS @%SystemRoot%\system32\efssvc.dll,-100
Automatic n/a* n/a* ekrn ESET Service
Automatic n/a* n/a* epfwwfpr epfwwfpr
Automatic n/a* n/a* EventSystem @comres.dll,-2450
Automatic n/a* n/a* FDResPub @%systemroot%\system32\fdrespub.dll,-100
Automatic n/a* n/a* FontCache @%systemroot%\system32\FntCache.dll,-100
Automatic n/a* n/a* IKEEXT @%SystemRoot%\system32\ikeext.dll,-501
Automatic n/a* n/a* iphlpsvc @%SystemRoot%\system32\iphlpsvc.dll,-500
Automatic n/a* n/a* LanmanServer @%systemroot%\system32\srvsvc.dll,-100
Automatic n/a* n/a* MMCSS @%systemroot%\system32\mmcss.dll,-100
Automatic n/a* n/a* NlaSvc @%SystemRoot%\System32\nlasvc.dll,-1
Automatic n/a* n/a* nsi @%SystemRoot%\system32\nsisvc.dll,-200
Automatic n/a* n/a* PcaSvc @%SystemRoot%\system32\pcasvc.dll,-1
Automatic n/a* n/a* PEAUTH PEAUTH
Automatic n/a* n/a* secdrv Security Driver
Automatic n/a* n/a* sppsvc @%SystemRoot%\system32\sppsvc.exe,-101
Automatic n/a* n/a* stisvc @%SystemRoot%\system32\wiaservc.dll,-9
Automatic n/a* n/a* SysMain @%SystemRoot%\system32\sysmain.dll,-1000
Automatic n/a* n/a* tcpipreg TCP/IP Registry Compatibility
Automatic n/a* n/a* TrkWks @%SystemRoot%\system32\trkwks.dll,-1
Automatic n/a* n/a* Winmgmt @%Systemroot%\system32\wbem\wmisvc.dll,-205
Automatic n/a* n/a* wlidsvc Windows Live ID Sign-in Assistant
Automatic n/a* n/a* wscsvc @%SystemRoot%\System32\wscsvc.dll,-200
Automatic n/a* n/a* wuauserv @%systemroot%\system32\wuaueng.dll,-105
[/FONT]

SysInternals LoadOrd is part of the SysInternals Suite available free of charge from Micrsoft TechNet.

usasma · Aug 17, 2012

More info on WMIC:
http://technet.microsoft.com/en-us/library/bb742610.aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/aa394531(v=vs.85).aspx

I've really gotta look into this!
Thanks John!

EDIT: from the help (/?) command in the wmic interpreter:

Code:

Microsoft Windows [Version 6.2.8400]
(c) 2012 Microsoft Corporation. All rights reserved.

C:\Windows\system32>wmic
wmic:root\cli>/?

[global switches] <command>

The following global switches are available:
/NAMESPACE           Path for the namespace the alias operate against.
/ROLE                Path for the role containing the alias definitions.
/NODE                Servers the alias will operate against.
/IMPLEVEL            Client impersonation level.
/AUTHLEVEL           Client authentication level.
/LOCALE              Language id the client should use.
/PRIVILEGES          Enable or disable all privileges.
/TRACE               Outputs debugging information to stderr.
/RECORD              Logs all input commands and output.
/INTERACTIVE         Sets or resets the interactive mode.
/FAILFAST            Sets or resets the FailFast mode.
/USER                User to be used during the session.
/PASSWORD            Password to be used for session login.
/OUTPUT              Specifies the mode for output redirection.
/APPEND              Specifies the mode for output redirection.
/AGGREGATE           Sets or resets aggregate mode.
/AUTHORITY           Specifies the <authority type> for the connection.
/?[:<BRIEF|FULL>]    Usage information.

For more information on a specific global switch, type: switch-name /?


The following alias/es are available in the current role:
ALIAS                    - Access to the aliases available on the local system
BASEBOARD                - Base board (also known as a motherboard or system board) management.
BIOS                     - Basic input/output services (BIOS) management.
BOOTCONFIG               - Boot configuration management.
CDROM                    - CD-ROM management.
COMPUTERSYSTEM           - Computer system management.
CPU                      - CPU management.
CSPRODUCT                - Computer system product information from SMBIOS.
DATAFILE                 - DataFile Management.
DCOMAPP                  - DCOM Application management.
DESKTOP                  - User's Desktop management.
DESKTOPMONITOR           - Desktop Monitor management.
DEVICEMEMORYADDRESS      - Device memory addresses management.
DISKDRIVE                - Physical disk drive management.
DISKQUOTA                - Disk space usage for NTFS volumes.
DMACHANNEL               - Direct memory access (DMA) channel management.
ENVIRONMENT              - System environment settings management.
FSDIR                    - Filesystem directory entry management.
GROUP                    - Group account management.
IDECONTROLLER            - IDE Controller management.
IRQ                      - Interrupt request line (IRQ) management.
JOB                      - Provides  access to the jobs scheduled using the schedule service.
LOADORDER                - Management of system services that define execution dependencies.
LOGICALDISK              - Local storage device management.
LOGON                    - LOGON Sessions.
MEMCACHE                 - Cache memory management.
MEMORYCHIP               - Memory chip information.
MEMPHYSICAL              - Computer system's physical memory management.
NETCLIENT                - Network Client management.
NETLOGIN                 - Network login information (of a particular user) management.
NETPROTOCOL              - Protocols (and their network characteristics) management.
NETUSE                   - Active network connection management.
NIC                      - Network Interface Controller (NIC) management.
NICCONFIG                - Network adapter management.
NTDOMAIN                 - NT Domain management.
NTEVENT                  - Entries in the NT Event Log.
NTEVENTLOG               - NT eventlog file management.
ONBOARDDEVICE            - Management of common adapter devices built into the motherboard (system board).
OS                       - Installed Operating System/s management.
PAGEFILE                 - Virtual memory file swapping management.
PAGEFILESET              - Page file settings management.
PARTITION                - Management of partitioned areas of a physical disk.
PORT                     - I/O port management.
PORTCONNECTOR            - Physical connection ports management.
PRINTER                  - Printer device management.
PRINTERCONFIG            - Printer device configuration management.
PRINTJOB                 - Print job management.
PROCESS                  - Process management.
PRODUCT                  - Installation package task management.
QFE                      - Quick Fix Engineering.
QUOTASETTING             - Setting information for disk quotas on a volume.
RDACCOUNT                - Remote Desktop connection permission management.
RDNIC                    - Remote Desktop connection management on a specific network adapter.
RDPERMISSIONS            - Permissions to a specific Remote Desktop connection.
RDTOGGLE                 - Turning Remote Desktop listener on or off remotely.
RECOVEROS                - Information that will be gathered from memory when the operating system fails.
REGISTRY                 - Computer system registry management.
SCSICONTROLLER           - SCSI Controller management.
SERVER                   - Server information management.
SERVICE                  - Service application management.
SHADOWCOPY               - Shadow copy management.
SHADOWSTORAGE            - Shadow copy storage area management.
SHARE                    - Shared resource management.
SOFTWAREELEMENT          - Management of the  elements of a software product installed on a system.
SOFTWAREFEATURE          - Management of software product subsets of SoftwareElement.
SOUNDDEV                 - Sound Device management.
STARTUP                  - Management of commands that run automatically when users log onto the computer system.
SYSACCOUNT               - System account management.
SYSDRIVER                - Management of the system driver for a base service.
SYSTEMENCLOSURE          - Physical system enclosure management.
SYSTEMSLOT               - Management of physical connection points including ports,  slots and peripherals, and proprietary connections points.
TAPEDRIVE                - Tape drive management.
TEMPERATURE              - Data management of a temperature sensor (electronic thermometer).
TIMEZONE                 - Time zone data management.
UPS                      - Uninterruptible power supply (UPS) management.
USERACCOUNT              - User account management.
VOLTAGE                  - Voltage sensor (electronic voltmeter) data management.
VOLUME                   - Local storage volume management.
VOLUMEQUOTASETTING       - Associates the disk quota setting with a specific disk volume.
VOLUMEUSERQUOTA          - Per user storage volume quota management.
WMISET                   - WMI service operational parameters management.

For more information on a specific alias, type: alias /?

CLASS     - Escapes to full WMI schema.
PATH      - Escapes to full WMI object paths.
CONTEXT   - Displays the state of all the global switches.
QUIT/EXIT - Exits the program.

For more information on CLASS/PATH/CONTEXT, type: (CLASS | PATH | CONTEXT) /?

jcgriff2 · Aug 17, 2012

I have another 100+ WMI HTML output files to post, John !!!!

No where done here yet... :thumbsup2:

Masterchiefxx17 · Aug 17, 2012

This is cool John! I'll mess around with it a little bit today :grin1:

jcgriff2 · Aug 17, 2012

OK... suspense about to end.

Download the zip, extract the bat file, run as Admin.

Output = new folder in Docs called WMI.

Credit for most goes to our own TJ, aka Undocked_Windy

John

p.s. It may take several minutes to run. ~70 output HTML files.

Capt.Jack Sparrow · Aug 17, 2012

Hi John!

Great scripts. You may wanna try the new version http://www.microsoft.com/en-us/download/details.aspx?id=29939 it very good if your also using PowerShell since it comes with PowerShell 3.0.

Changelog:

Code:

[B]WMI[/B]
 WMI in Windows Management Framework 3.0 introduces: • A new provider development model
 This new model brings down the cost of provider development and removes the dependency on COM.
 • A new MI Client API to perform standard CIM operations. 
The API can be used to interact with any standard WsMan + CIMOM implementation, allowing management applications on Windows to manage non-Windows computers.
 • The ability to write Windows PowerShell cmdlets in native code 
The new WMI Provider APIs supports an extended Windows PowerShell semantics API allowing you to provide rich Windows PowerShell semantics. e.g., Verbose, Error, Warning, WhatIf, Confirm, Progress

Tj Belfiore · Aug 17, 2012

I figure since I started this project back in 07' @ TSF I should probably finish it. I'm working on another beta version as we speak. Features included are the gathering of all wmic info and system info + the actual meanings to what the wmic output even is. Can't wait. Don't expect it too soon. thx.

jcgriff2 · Aug 25, 2012

https://www.sysnative.com/forums/sh...own-every-15-min?p=25098&viewfull=1#post25098

http://computerperformance.co.uk/vbscript/wmi_scriptomatic.htm

jcgriff2 · Jun 18, 2013

Group Policy Result Tool - GPResult.exe

http://technet.microsoft.com/en-us/library/cc733160(v=ws.10).aspx

Displays the Resultant Set of Policy (RSoP) information for a remote user and computer. For examples of how this command can be used, see Examples.

Code:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\PalmDesert>[SIZE=3]
[FONT=Meiryo Ui][B]gpresult /?[/B]
[/FONT][/SIZE]

GPRESULT [/S system [/U username [/P [password]]]] [/SCOPE scope]
           [/USER targetusername] [/R | /V | /Z] [(/X | /H) <filename> [/F]]

Description:
    This command line tool displays the Resultant Set of Policy (RSoP)
    information for a target user and computer.

Parameter List:
    /S        system           Specifies the remote system to connect to.

    /U        [domain\]user    Specifies the user context under which the
                               command should execute.
                               Can not be used with /X, /H.

    /P        [password]       Specifies the password for the given user
                               context. Prompts for input if omitted.
                               Can not be used with /X, /H.

    /SCOPE    scope            Specifies whether the user or the
                               computer settings needs to be displayed.
                               Valid values: "USER", "COMPUTER".

    /USER     [domain\]user    Specifies the user name for which the
                               RSOP data is to be displayed.

    /X        <filename>       Saves the report in XML format at the
                               location and with the file name specified
                               by the <filename> parameter. (valid in Windows
                               Vista SP1 and above and Windows Server 2008 and above)

    /H        <filename>       Saves the report in HTML format at the
                               location and with the file name specified by
                               the <filename> parameter. (valid in Windows
                               Vista SP1 and above and Windows Server 2008 and above)

    /F                         Forces gpresult to overwrite the file name
                               specified in the /X or /H command.

    /R                         Displays RSoP summary data.

    /V                         Specifies that verbose information should
                               be displayed. Verbose information provides
                               additional detailed settings that have
                               been applied with a precedence of 1.

    /Z                         Specifies that the super-verbose
                               information should be displayed. Super-
                               verbose information provides additional
                               detailed settings that have been applied
                               with a precedence of 1 and higher. This
                               allows you to see if a setting was set in
                               multiple places. See the Group Policy
                               online help topic for more information.

    /?                         Displays this help message.


Examples:
    GPRESULT /R
    GPRESULT /H GPReport.html
    GPRESULT /USER targetusername /V
    GPRESULT /S system /USER targetusername /SCOPE COMPUTER /Z
    GPRESULT /S system /U username /P password /SCOPE USER /V

Code:

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 12/4/2011 at 02:37:51

RSOP data for CENTCOM\PalmDesert on CENTCOM : Logging Mode
-----------------------------------------------------------

OS Configuration:            Standalone Workstation
OS Version:                  6.1.7601
Site Name:                   N/A
Roaming Profile:             N/A
Local Profile:               C:\Users\PalmDesert
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    
    Last time Group Policy was applied: 12/4/2011 at 01:19:35
    Group Policy was applied from:      N/A
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        CENTCOM
    Domain Type:                        <Local Computer>

    Applied Group Policy Objects
    -----------------------------
        N/A

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups
    -------------------------------------------------------
        System Mandatory Level
        Everyone
        BUILTIN\Users
        NT AUTHORITY\SERVICE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        BDESVC
        BITS
        CertPropSvc
        EapHost
        hkmsvc
        IKEEXT
        iphlpsvc
        LanmanServer
        MMCSS
        MSiSCSI
        RasAuto
        RasMan
        RemoteAccess
        Schedule
        SCPolicySvc
        SENS
        SessionEnv
        SharedAccess
        ShellHWDetection
        wercplsupport
        Winmgmt
        wuauserv
        LOCAL
        BUILTIN\Administrators
        
    Resultant Set Of Policies for Computer
    ---------------------------------------

        Software Installations
        ----------------------
            N/A

        Startup Scripts
        ---------------
            N/A

        Shutdown Scripts
        ----------------
            N/A

        Account Policies
        ----------------
            N/A

        Audit Policy
        ------------
            N/A

        User Rights
        -----------
            N/A

        Security Options
        ----------------
            N/A

            N/A

        Event Log Settings
        ------------------
            N/A

        Restricted Groups
        -----------------
            N/A

        System Services
        ---------------
            N/A

        Registry Settings
        -----------------
            N/A

        File System Settings
        --------------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            N/A
[SIZE=3]
[B][FONT=Meiryo Ui]USER SETTINGS[/FONT]
[/B]
[/SIZE]
--------------
    
    Last time Group Policy was applied: 12/4/2011 at 02:35:35
    Group Policy was applied from:      N/A
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        CENTCOM
    Domain Type:                        <Local Computer>
    
    Applied Group Policy Objects
    -----------------------------
        Local Group Policy

    The user is a part of the following security groups
    ---------------------------------------------------
        None
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        NTLM Authentication
        High Mandatory Level
        
    The user has the following security privileges
    ----------------------------------------------

        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Change the time zone
        Create symbolic links
        Increase a process working set

    Resultant Set Of Policies for User
    -----------------------------------

        Software Installations
        ----------------------
            N/A

        Logon Scripts
        -------------
            N/A

        Logoff Scripts
        --------------
            N/A

        Public Key Policies
        -------------------
            N/A

        Administrative Templates
        ------------------------
            GPO: Local Group Policy
                KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\MaxRecentDocs
                Value:       33, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Internet Explorer\Main\AlwaysShowMenus
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Internet Explorer\BrowserEmulation\AllSitesCompatibilityMode
                Value:       1, 0, 0, 0
                State:       Enabled

            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Internet Explorer\CommandBar\ShowCompatibilityViewButton
                Value:       1, 0, 0, 0
                State:       Enabled

        Folder Redirection
        ------------------
            N/A

        Internet Explorer Browser User Interface
        ----------------------------------------
            GPO: Local Group Policy
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   jcgriff2
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No

        Internet Explorer Connection
        ----------------------------
            HTTP Proxy Server:   N/A
            Secure Proxy Server: N/A
            FTP Proxy Server:    N/A
            Gopher Proxy Server: N/A
            Socks Proxy Server:  N/A
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      No

        Internet Explorer URLs
        ----------------------
            GPO: Local Group Policy
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A

        Internet Explorer Security
        --------------------------
            Always Viewable Sites:     N/A
            Password Override Enabled: False

            GPO: Local Group Policy
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       No
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No

        Internet Explorer Programs
        --------------------------
            GPO: Local Group Policy
                Import the current Program Settings: No

Examples

Read More:

PROXIMO · Apr 20, 2021

thanks for sharing. This is useful

FreeBooter · Dec 23, 2021

Get PC Hardware Information in Windows 7 and later versions of Windows OS.

Code:

:: Get PC Hardware Information in Windows 7 and later versions of Windows OS

@Echo Off & Color 0E


(Net session >nul 2>&1)||(PowerShell start """%~0""" -verb RunAs & Exit /B)

Cls & Mode CON  LINES=60 COLS=155 & Color 0E & Title Created By FreeBooter


Echo CPU:
wmic cpu get caption, deviceid, name, numberofcores, maxclockspeed, status, NumberOfLogicalProcessors
for /f "skip=1 tokens=2 delims==" %%A in ('wmic /namespace:\\root\wmi PATH MSAcpi_ThermalZoneTemperature get CurrentTemperature /value') do set /a "HunDegCel=(%%~A*10)-27315"
echo CPU Temperature %HunDegCel:~0,-2%.%HunDegCel:~-2% Degrees Celsius
Echo.
Echo Motherboard:
Cd %TMP%
Echo Get-WmiObject win32_baseboard ^| Format-List Product,Manufacturer,SerialNumber,Version > info.ps1
Powershell -ExecutionPolicy ByPass -File info.ps1
Echo.
Echo NIC:
wmic nic get AdapterType, Name, Installed, MACAddress, PowerManagementSupported, Speed
Echo.
Echo BIOS:
wmic BIOS get name, version, serialnumber
Echo.
Echo Disk Drive:
wmic diskdrive get Name, Manufacturer, Model, InterfaceType, MediaType, SerialNumber
wmic /namespace:\\root\wmi path MSStorageDriver_FailurePredictStatus
Echo.
Echo Memory:
wmic MemoryChip get BankLabel, Capacity, MemoryType, TypeDetail, Speed, Tag, PartNumber, SerialNumber

Pause
Del info.ps1

Parameter	Description
/s <COMPUTER>	Specifies the name or IP address of a remote computer. Do not use backslashes. The default is the local computer.
/u <USERNAME>	Uses the credentials of the specified user to run the command. The default user is the user who is logged on to the computer that issues the command.
/p [<PASSWORD>]	Specifies the password of the user account that is provided in the /u parameter. If /p is omitted, gpresult prompts for the password. /p cannot be used with /x or /h.
/user [<TARGETDOMAIN>\]<TARGETUSER>	Specifies the remote user whose RSoP data is to be displayed.
/scope {user \| computer}	Displays RSoP data for either the user or the computer. If /scope is omitted, gpresult displays RSoP data for both the user and the computer.
[/x \| /h] <FILENAME>	Saves the report in either XML (/x) or HTML (/h) format at the location and with the file name that is specified by the FILENAME parameter. Cannot be used with /u, /p, /r, /v, or /z.
/f	Forces gpresult to overwrite the file name that is specified in the /x or /h option.
/r	Displays RSoP summary data.
/v	Displays verbose policy information. This includes detailed settings that were applied with a precedence of 1.
/z	Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher.
/?	Displays Help at the command prompt.

WMI - Windows Management Instrumentation - BATCH SCRIPTS

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

usasma

Retired Admin

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Masterchiefxx17

Sysnative Staff

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Attachments

Capt.Jack Sparrow

BSOD Kernel Dump Expert

Tj Belfiore

Well-known member

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

PROXIMO

Member

FreeBooter

Member

WMI - Windows Management Instrumentation - BATCH SCRIPTS

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Retired Admin

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Sysnative Staff

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Attachments

BSOD Kernel Dump Expert

Well-known member

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Co-Founder / AdminBSOD Instructor/ExpertMicrosoft MVP (Ret.)

Member

Member

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)