{"id":15351,"date":"2011-03-11T00:01:00","date_gmt":"2011-03-11T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2011\/03\/11\/use-powershell-to-find-writable-wmi-properties\/"},"modified":"2011-03-11T00:01:00","modified_gmt":"2011-03-11T00:01:00","slug":"use-powershell-to-find-writable-wmi-properties","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/use-powershell-to-find-writable-wmi-properties\/","title":{"rendered":"Use PowerShell to Find Writable WMI Properties"},"content":{"rendered":"

Summary<\/b>: Learn how to use Windows PowerShell to find WMI classes that allow you to change property values.<\/p>\n

\"Hey,  Hey Scripting Guy! I recently saw a Windows PowerShell script that looked like it actually changed the value of a property. I know that Windows PowerShell methods require you to put things in parentheses, and this script did not have any parentheses. The fact that it used an equal sign (=) makes me think that it was changing a property, but it seems like it should have used a method to make a change. Is this a Windows PowerShell thing, or a WMI thing, or did the script actually not work?<\/p>\n

—JE<\/p>\n

\"Hey, Hello JE, <\/p>\n

Microsoft Scripting Guy, Ed Wilson, here. I appreciate your confidence in me. Without even providing me with the text of a script, you ask me if it will work or not! Dude<\/a> (or dudette), I have been asked all kinds of wild questions in the past, but never has anyone asked me to tell them if a script will work sight unseen. However, I think I might understand your confusion. <\/p>\n

Windows Management Instrumentation (WMI) actually exposes a few properties that are read\/write. This means I can actually change things by setting a new value for a property. Although WMI methods show up in a convenient location in the MSDN documentation, and even in the WMI Tester (WbemTest), there is no centralized location for read\/write WMI properties. Methods for the Win32_Volume WMI class are shown in the following image.<\/p>\n

\"Image<\/a><\/p>\n

In the end, if one wishes to find properties that can do things, one has to click them one-by-one. Using wbemtest<\/a> to find a read\/write property entails double-clicking every single property in the property list of Properties section. When the Property Editor appears, if the property has the write Qualifier (in the Qualifiers section) the property is read\/write. The Property Editor for the DriveLetter<\/b> property of the Win32_Volume WMI class is shown in the following image. As you can see, this property is writable. <\/p>\n

\"Image<\/a><\/p>\n

The only problem with this approach is that the Win32_Volume WMI class has 44 regular properties and 10 system properties. I discovered this by using the following code.<\/p>\n

\n

PS C:\\Users\\ed.NWTRADERS> gwmi win32_volume -Filter “driveletter = ‘c:'” | select -ExpandProperty properties | measure-object<\/span><\/p>\n

Count : 44<\/span><\/p>\n

Average : <\/span><\/p>\n

Sum : <\/span><\/p>\n

Maximum : <\/span><\/p>\n

Minimum : <\/span><\/p>\n

Property :<\/span><\/p>\n

PS C:\\Users\\ed.NWTRADERS> gwmi win32_volume -Filter “driveletter = ‘c:'” | select systemproperties | measure-object<\/span><\/p>\n

Count : 1<\/span><\/p>\n

Average : <\/span><\/p>\n

Sum : <\/span><\/p>\n

Maximum : <\/span><\/p>\n

Minimum : <\/span><\/p>\n

Property :<\/span><\/p>\n<\/blockquote>\n

I decided to fix this situation by writing a Get-WmiClassProperties.ps1 script that will retrieve all of the read\/write WMI properties from all WMI classes in a particular WMI namespace. The complete Get-WmiClassProperties.ps1 script is similar to the Get-WmiClassMethods.ps1 script from yesterday’s Hey Scripting Guy! blog<\/a>. <\/p>\n

The complete Get-WmiClassMethods.ps1 is shown here. For ease of copying, the complete script is uploaded to the Scripting Guys Script Repository<\/span><\/strong><\/a>. <\/p>\n

Get-WmiClassMethods.ps1<\/strong><\/p>\n

\n

# —————————————————————————–<\/span><\/span><\/span><\/p>\n

# Script: Get-WmiClassProperties.ps1<\/span><\/span><\/span><\/p>\n

# Author: ed wilson, msft<\/span><\/span><\/span><\/p>\n

# Date: 03\/08\/2011 12:46:15<\/span><\/span><\/span><\/p>\n

# Keywords: Scripting Techniques, WMI<\/span><\/span><\/span><\/p>\n

# comments: Gets dynamic WMI classes that have methods marked with the implemented<\/span><\/span><\/span><\/p>\n

# qualifier<\/span><\/span><\/span><\/p>\n

# HSG-3-11-11<\/span><\/span><\/span><\/p>\n

# —————————————————————————–<\/span><\/span><\/span><\/p>\n

function New-Underline<\/span><\/span><\/span><\/p>\n

{<\/span><\/span><\/span><\/p>\n

<#<\/span><\/span><\/span><\/p>\n

.Synopsis<\/span><\/span><\/span><\/p>\n

 <\/span>Creates an underline the length of the input string<\/span><\/span><\/span><\/p>\n

.Example<\/span><\/span><\/span><\/p>\n

 <\/span>New-Underline -strIN “Hello world”<\/span><\/span><\/span><\/p>\n

.Example<\/span><\/span><\/span><\/p>\n

 <\/span>New-Underline -strIn “Morgen welt” -char “-” -sColor “blue” -uColor “yellow”<\/span><\/span><\/span><\/p>\n

.Example<\/span><\/span><\/span><\/p>\n

 <\/span>“this is a string” | New-Underline<\/span><\/span><\/span><\/p>\n

.Notes<\/span><\/span><\/span><\/p>\n

 <\/span>NAME:<\/span><\/span><\/span><\/p>\n

 <\/span>AUTHOR: Ed Wilson<\/span><\/span><\/span><\/p>\n

 <\/span>LASTEDIT: 5\/20\/2009<\/span><\/span><\/span><\/p>\n

 <\/span>KEYWORDS:<\/span><\/span><\/span><\/p>\n

.Link<\/span><\/span><\/span><\/p>\n

 <\/span>Http:\/\/www.ScriptingGuys.com<\/span><\/span><\/span><\/p>\n

#><\/span><\/span><\/span><\/p>\n

[CmdletBinding()]<\/span><\/span><\/span><\/p>\n

param(<\/span><\/span><\/span><\/p>\n

      <\/span>[Parameter(Mandatory = $true,Position = 0,valueFromPipeline=$true)]<\/span><\/span><\/span><\/p>\n

      <\/span>[string]<\/span><\/span><\/span><\/p>\n

      <\/span>$strIN,<\/span><\/span><\/span><\/p>\n

      <\/span>[string]<\/span><\/span><\/span><\/p>\n

      <\/span>$char = “=”,<\/span><\/span><\/span><\/p>\n

      <\/span>[string]<\/span><\/span><\/span><\/p>\n

      <\/span>$sColor = “Green”,<\/span><\/span><\/span><\/p>\n

      <\/span>[string]<\/span><\/span><\/span><\/p>\n

      <\/span>$uColor = “darkGreen”,<\/span><\/span><\/span><\/p>\n

      <\/span>[switch]<\/span><\/span><\/span><\/p>\n

      <\/span>$pipe<\/span><\/span><\/span><\/p>\n

 <\/span>) #end param<\/span><\/span><\/span><\/p>\n

 <\/span>$strLine= $char * $strIn.length<\/span><\/span><\/span><\/p>\n

 <\/span>if(-not $pipe)<\/span><\/span><\/span><\/p>\n

  <\/span>{<\/span><\/span><\/span><\/p>\n

   <\/span>Write-Host -ForegroundColor $sColor $strIN<\/span><\/span><\/span><\/p>\n

   <\/span>Write-Host -ForegroundColor $uColor $strLine<\/span><\/span><\/span><\/p>\n

  <\/span>}<\/span><\/span><\/span><\/p>\n

  <\/span>Else<\/span><\/span><\/span><\/p>\n

  <\/span>{<\/span><\/span><\/span><\/p>\n

  <\/span>$strIn<\/span><\/span><\/span><\/p>\n

  <\/span>$strLine<\/span><\/span><\/span><\/p>\n

  <\/span>}<\/span><\/span><\/span><\/p>\n

} #end new-underline function<\/span><\/span><\/span><\/p>\n

 <\/span><\/span><\/span><\/p>\n

Function Get-WmiClassProperties<\/span><\/span><\/span><\/p>\n

{ <\/span><\/span><\/span><\/p>\n

 <\/span>Param(<\/span><\/span><\/span><\/p>\n

   <\/span>[string]$namespace = “root\\cimv2”,<\/span><\/span><\/span><\/p>\n

   <\/span>[string]$computer = “.”<\/span><\/span><\/span><\/p>\n

)<\/span><\/span><\/span><\/p>\n

 <\/span>$abstract = $false<\/span><\/span><\/span><\/p>\n

 <\/span>$property = $null<\/span><\/span><\/span><\/p>\n

 <\/span>$classes = Get-WmiObject -List -Namespace $namespace <\/span><\/span><\/span><\/p>\n

 <\/span>Foreach($class in $classes)<\/span><\/span><\/span><\/p>\n

 <\/span>{<\/span><\/span><\/span><\/p>\n

  <\/span>Foreach($q in $class.Qualifiers)<\/span><\/span><\/span><\/p>\n

   <\/span>{ if ($q.name -eq ‘Abstract’) {$abstract = $true} }<\/span><\/span><\/span><\/p>\n

  <\/span>If(!$abstract) <\/span><\/span><\/span><\/p>\n

    <\/span>{ <\/span><\/span><\/span><\/p>\n

     <\/span>Foreach($p in $class.Properties)<\/span><\/span><\/span><\/p>\n

      <\/span>{ <\/span><\/span><\/span><\/p>\n

       <\/span>Foreach($q in $p.qualifiers) <\/span><\/span><\/span><\/p>\n

        <\/span>{ <\/span><\/span><\/span><\/p>\n

         <\/span>if($q.name -match “write”) <\/span><\/span><\/span><\/p>\n

          <\/span>{ <\/span><\/span><\/span><\/p>\n

            <\/span>$property += $p.name + “`r`n”<\/span><\/span><\/span><\/p>\n

          <\/span>} #end if name<\/span><\/span><\/span><\/p>\n

        <\/span>} #end foreach q<\/span><\/span><\/span><\/p>\n

      <\/span>} #end foreach p<\/span><\/span><\/span><\/p>\n

      <\/span>if($property) {New-Underline $class.name}<\/span><\/span><\/span><\/p>\n

      <\/span>$property<\/span><\/span><\/span><\/p>\n

    <\/span>} #end if not abstract<\/span><\/span><\/span><\/p>\n

  <\/span>$abstract = $false<\/span><\/span><\/span><\/p>\n

  <\/span>$property = $null<\/span><\/span><\/span><\/p>\n

 <\/span>} #end foreach class<\/span><\/span><\/span><\/p>\n

} #end function Get-WmiClassProperties<\/span><\/span><\/span><\/p>\n

 <\/span><\/span><\/span><\/p>\n

# *** Entry Point to Script ***<\/span><\/span><\/span><\/p>\n

Get-WmiClassProperties<\/span><\/span><\/span><\/p>\n<\/blockquote>\n

The script begins by creating the New-Underline function<\/a> that has been used in several scripts that appear in the Hey Scripting Guy! blog. <\/p>\n

The Get-WmiClassProperties<\/b> function begins by creating a couple of parameters, initializing a couple of variables, and obtaining a collection of all the WMI classes in a particular WMI namespace. This portion of the script is shown here.<\/p>\n

\n

Function Get-WmiClassProperties<\/span><\/p>\n

{ <\/span><\/p>\n

Param(<\/span><\/p>\n

[string]$namespace = “root\\cimv2”,<\/span><\/p>\n

[string]$computer = “.”<\/span><\/p>\n

)<\/span><\/p>\n

$abstract = $false<\/span><\/p>\n

$property = $null<\/span><\/p>\n

$classes = Get-WmiObject -List -Namespace $namespace<\/span><\/p>\n<\/blockquote>\n

Next, the function uses the Foreach<\/i> keyword to walk through the collection of classes. It checks the class qualifiers collection to see if one of the qualifiers is abstract<\/b>. If a WMI class is an abstract, it should not be queried directly. This portion of the script is shown here.<\/p>\n

\n

Foreach($class in $classes)<\/span><\/p>\n

{<\/span><\/p>\n

Foreach($q in $class.Qualifiers)<\/span><\/p>\n

{ if ($q.name -eq ‘Abstract’) {$abstract = $true} }<\/span><\/p>\n<\/blockquote>\n

After a WMI class is determined to not be an abstract<\/b> class, the properties collection of the WMI class is retrieved, and each of the properties qualifiers are examined to see if the write<\/i> qualifier appears. This portion of the script is shown here.<\/p>\n

\n

If(!$abstract) <\/span><\/p>\n

{ <\/span><\/p>\n

Foreach($p in $class.Properties)<\/span><\/p>\n

{ <\/span><\/p>\n

Foreach($q in $p.qualifiers) <\/span><\/p>\n

{ <\/span><\/p>\n

if($q.name -match “write”)<\/span><\/p>\n<\/blockquote>\n

I add each writable property name to the $property<\/b> variable, and add a return and a new line character at the end of each property name. Next I call the New-Underline<\/b> function to underline the name of WMI classes that have at least one writable WMI property. After that I list each writable property under the name of the WMI class, reinitialize a couple of variables, end the function, and call the script. This portion of the script is shown here.<\/p>\n

\n

{ <\/span><\/p>\n

$property += $p.name + “`r`n”<\/span><\/p>\n

} #end if name<\/span><\/p>\n

} #end foreach q<\/span><\/p>\n

} #end foreach p<\/span><\/p>\n

if($property) {New-Underline $class.name}<\/span><\/p>\n

$property<\/span><\/p>\n

} #end if not abstract<\/span><\/p>\n

$abstract = $false<\/span><\/p>\n

$property = $null<\/span><\/p>\n

} #end foreach class<\/span><\/p>\n

} #end function Get-WmiClassProperties<\/span><\/p>\n

# *** Entry Point to Script ***<\/span><\/p>\n

Get-WmiClassProperties<\/span><\/p>\n<\/blockquote>\n

When the script run, it produces a listing similar to the one in the following image.<\/p>\n

\"Image<\/a><\/p>\n

JE, that is all there is to finding WMI class properties that can actually do things. I invite you to join me tomorrow for the Weekend Scripter<\/a>, when I will begin to make a couple of improvements to these exploratory scripts—it will be cool!<\/p>\n

I invite you to follow me on Twitter<\/a> and Facebook<\/a>. If you have any questions, send email to me at scripter@microsoft.com<\/a>, or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.<\/p>\n

Ed Wilson, Microsoft Scripting Guy<\/span><\/b><\/p>\n","protected":false},"excerpt":{"rendered":"

Summary: Learn how to use Windows PowerShell to find WMI classes that allow you to change property values.   Hey Scripting Guy! I recently saw a Windows PowerShell script that looked like it actually changed the value of a property. I know that Windows PowerShell methods require you to put things in parentheses, and this […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[3,4,45,6],"class_list":["post-15351","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-scripting-guy","tag-scripting-techniques","tag-windows-powershell","tag-wmi"],"acf":[],"blog_post_summary":"

Summary: Learn how to use Windows PowerShell to find WMI classes that allow you to change property values.   Hey Scripting Guy! I recently saw a Windows PowerShell script that looked like it actually changed the value of a property. I know that Windows PowerShell methods require you to put things in parentheses, and this […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/15351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=15351"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/15351\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=15351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=15351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=15351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}