 Loading |
|
Loading |
| VBScript |
| JavaScript |
| Powershell |
Search Options: WMI Win32_NTEventlogFile Query
|
||
|
var wbemFlagReturnImmediately = 0x10;
var wbemFlagForwardOnly = 0x20; var arrComputers = new Array("."); for (i = 0; i < arrComputers.length; i++) { WScript.Echo(); WScript.Echo("=========================================="); WScript.Echo("Computer: " + arrComputers[i]); WScript.Echo("=========================================="); var objWMIService = GetObject("winmgmts:\\\\" + arrComputers[i] + "\\root\\CIMV2"); var colItems = objWMIService.ExecQuery("SELECT * FROM Win32_NTEventlogFile", "WQL", wbemFlagReturnImmediately | wbemFlagForwardOnly); var enumItems = new Enumerator(colItems); for (; !enumItems.atEnd(); enumItems.moveNext()) { var objItem = enumItems.item(); WScript.Echo("AccessMask: " + objItem.AccessMask); WScript.Echo("Archive: " + objItem.Archive); WScript.Echo("Caption: " + objItem.Caption); WScript.Echo("Compressed: " + objItem.Compressed); WScript.Echo("CompressionMethod: " + objItem.CompressionMethod); WScript.Echo("CreationClassName: " + objItem.CreationClassName); WScript.Echo("CreationDate: " + WMIDateStringToDate(objItem.CreationDate)); WScript.Echo("CSCreationClassName: " + objItem.CSCreationClassName); WScript.Echo("CSName: " + objItem.CSName); WScript.Echo("Description: " + objItem.Description); WScript.Echo("Drive: " + objItem.Drive); WScript.Echo("EightDotThreeFileName: " + objItem.EightDotThreeFileName); WScript.Echo("Encrypted: " + objItem.Encrypted); WScript.Echo("EncryptionMethod: " + objItem.EncryptionMethod); WScript.Echo("Extension: " + objItem.Extension); WScript.Echo("FileName: " + objItem.FileName); WScript.Echo("FileSize: " + objItem.FileSize); WScript.Echo("FileType: " + objItem.FileType); WScript.Echo("FSCreationClassName: " + objItem.FSCreationClassName); WScript.Echo("FSName: " + objItem.FSName); WScript.Echo("Hidden: " + objItem.Hidden); WScript.Echo("InstallDate: " + WMIDateStringToDate(objItem.InstallDate)); WScript.Echo("InUseCount: " + objItem.InUseCount); WScript.Echo("LastAccessed: " + WMIDateStringToDate(objItem.LastAccessed)); WScript.Echo("LastModified: " + WMIDateStringToDate(objItem.LastModified)); WScript.Echo("LogfileName: " + objItem.LogfileName); WScript.Echo("Manufacturer: " + objItem.Manufacturer); WScript.Echo("MaxFileSize: " + objItem.MaxFileSize); WScript.Echo("Name: " + objItem.Name); WScript.Echo("NumberOfRecords: " + objItem.NumberOfRecords); WScript.Echo("OverwriteOutDated: " + objItem.OverwriteOutDated); WScript.Echo("OverWritePolicy: " + objItem.OverWritePolicy); WScript.Echo("Path: " + objItem.Path); WScript.Echo("Readable: " + objItem.Readable); try { WScript.Echo("Sources: " + (objItem.Sources.toArray()).join(",")); } catch(e) { WScript.Echo("Sources: null"); } WScript.Echo("Status: " + objItem.Status); WScript.Echo("System: " + objItem.System); WScript.Echo("Version: " + objItem.Version); WScript.Echo("Writeable: " + objItem.Writeable); } } function WMIDateStringToDate(dtmDate) { if (dtmDate == null) { return "null date"; } var strDateTime; if (dtmDate.substr(4, 1) == 0) { strDateTime = dtmDate.substr(5, 1) + "/"; } else { strDateTime = dtmDate.substr(4, 2) + "/"; } if (dtmDate.substr(6, 1) == 0) { strDateTime = strDateTime + dtmDate.substr(7, 1) + "/"; } else { strDateTime = strDateTime + dtmDate.substr(6, 2) + "/"; } strDateTime = strDateTime + dtmDate.substr(0, 4) + " " + dtmDate.substr(8, 2) + ":" + dtmDate.substr(10, 2) + ":" + dtmDate.substr(12, 2); return(strDateTime); } | ||
© 2008 - 2013 Boris Toll :: Scripts available: 6.481 :: :: scriptbox.toll.at :: :: powered by www.toll.at :: | ||
