{"id":18211,"date":"2010-05-30T00:01:00","date_gmt":"2010-05-30T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2010\/05\/30\/hey-scripting-guy-weekend-scripter-using-the-windows-search-index-to-find-specific-files\/"},"modified":"2010-05-30T00:01:00","modified_gmt":"2010-05-30T00:01:00","slug":"hey-scripting-guy-weekend-scripter-using-the-windows-search-index-to-find-specific-files","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/hey-scripting-guy-weekend-scripter-using-the-windows-search-index-to-find-specific-files\/","title":{"rendered":"Hey, Scripting Guy! Weekend Scripter: Using the Windows Search Index to Find Specific Files"},"content":{"rendered":"

\"Bookmark<\/span>\n <\/span><\/p>\n

Microsoft Scripting Guy Ed Wilson here. One of the cool things about using Windows PowerShell is the different objects with which you can interact. Windows Search is an example of this. By using ADO, you can query the Windows Search index and retrieve information about files. This technique can have some very interesting possibilities. Because querying the Windows Search index is so fast, a function could be written that would search for specific files that might be required in a script. You could also use this in an attempt to locate a missing file. <\/p>\n

<\/span><\/p>\n

The SearchSpecificWindowsSearch.ps1 script uses COM-based ADO objects to query the SystemIndex<\/b> for files that are larger than 10,000,000,000 bytes. Specific properties of the matching files are then displayed in the output window. The complete SearchSpecificWindowsSearch.ps1 script is seen here. <\/p>\n

<\/span><\/p>\n

SearchSpecificWindowsSearch.ps1<\/p>\n

<\/span><\/span><\/strong><\/p>\n

$query = “SELECT System.ItemName, system.ItemPathDisplay, System.ItemTypeText,
  <\/span>System.Size FROM SystemIndex where system.size > 10000000000″
$objConnection = New-Object -ComObject adodb.connection
$objrecordset = New-Object -ComObject adodb.recordset
$objconnection.open(
  <\/span>“Provider=Search.CollatorDSO;Extended Properties=’Application=Windows’;”)
$objrecordset.open($query, $objConnection)
Try { $objrecordset.MoveFirst() }
Catch [system.exception] { “no records returned” }
do
{
 <\/span>Write-host ($objrecordset.Fields.Item(“System.ItemName”)).value `
 <\/span>($objrecordset.Fields.Item(“System.ItemPathDisplay”)).value `
 <\/span>($objrecordset.Fields.Item(“System.ITemTypeText”)).value `
 <\/span>($objrecordset.Fields.Item(“System.Size”)).value
 <\/span>if(-not($objrecordset.EOF)) {$objrecordset.MoveNext()}
} Until ($objrecordset.EOF)<\/p>\n

$objrecordset.Close()
$objConnection.Close()
$objrecordset = $null
$objConnection = $null
[gc]::collect()<\/p>\n

<\/span><\/span><\/span><\/p>\n


There are two things you need to know about querying the Windows Search index. The first is the query syntax, and the second is the provider name. Beyond those two specifics, the script works just like any other script that queries ADO. <\/p>\n

<\/span><\/p>\n

The query string seen here returns the name, path, type, and size of files that meet specific size criteria. A special form of SQL is used to query the search index that is called Windows Search SQL. It is <\/span>documented on MSDN<\/span><\/a>. The field names are documented as part of the shell schema. On MSDN, these <\/span>shell schema properties<\/span><\/a> are grouped into categories. The <\/span>system properties<\/span><\/a> apply to multiple types of files and include properties such as the ones we selected in our script. You do not need to put quotation marks around the property names. Only system properties that are marked isQueryable = true<\/b> in the schema can be used in a query. This information is documented for each property on MSDN. The query syntax is powerful, and <\/span>each portion of the query is documented<\/span><\/a> on MSDN. <\/p>\n

<\/span><\/span><\/p>\n


$query = “SELECT System.ItemName, system.ItemPathDisplay, System.ItemTypeText,
  <\/span>System.Size FROM SystemIndex where system.size > 10000000000″<\/p>\n

<\/span><\/span><\/span><\/p>\n


The Write-Host <\/b>cmdlet is used to display the value of the properties that are selected. A single command is continued to multiple lines by using the backtick (line continuation) operator. It is the value of the property that is of interest. The Item<\/b> method is used to retrieve a specific property from the recordset<\/b> object. After the property is returned, the value of the property can be retrieved. This is seen here (note that only properties that are selected in the select<\/b> statement can be retrieved from the recordset):<\/b> <\/p>\n

<\/span><\/p>\n

Write-host ($objrecordset.Fields.Item(“System.ItemName”)).value `
 <\/span>($objrecordset.Fields.Item(“System.ItemPathDisplay”)).value `
 <\/span>($objrecordset.Fields.Item(“System.ITemTypeText”)).value `
 <\/span>($objrecordset.Fields.Item(“System.Size”)).value<\/p>\n

<\/span><\/span><\/span><\/p>\n


The rest of the script is basic ADO. Two Hey, Scripting Guy! Blog posts might be of interest to you in helping you use ADO with Windows PowerShell. The first talks about <\/span>using Windows PowerShell to query an Access database<\/span><\/a>, and the second article, also talks about <\/span>querying Access<\/span><\/span><\/a>, but features scripts that were submitted for the <\/span>2009 Summer Scripting Games<\/span><\/a>. Both articles are worth your time. <\/p>\n

<\/span><\/span><\/p>\n

When the SearchSpecificWindowsSearch.ps1 script is run, the output appears that is shown in the following image. <\/p>\n

<\/span><\/p>\n

\"Image<\/span><\/span><\/p>\n

 <\/span><\/p>\n

<\/span><\/p>\n

If you want to know exactly what we will be looking at tomorrow, follow us on <\/span>Twitter<\/span><\/a> or <\/span>Facebook<\/span><\/a>. If you have any questions, send e-mail to us at <\/span>scripter@microsoft.com<\/span><\/a> or post your questions on the <\/span>Official Scripting Guys Forum<\/span><\/a>. See you tomorrow. Until then, peace.<\/p>\n

<\/span><\/span><\/p>\n

 <\/span><\/p>\n

<\/span>\nEd Wilson and Craig Liebendorfer, Scripting Guys<\/p>\n

<\/span><\/span><\/span><\/b><\/p>\n

<\/span><\/span><\/b><\/p>\n","protected":false},"excerpt":{"rendered":"

  Microsoft Scripting Guy Ed Wilson here. One of the cool things about using Windows PowerShell is the different objects with which you can interact. Windows Search is an example of this. By using ADO, you can query the Windows Search index and retrieve information about files. This technique can have some very interesting possibilities. […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[19,146,31,3,147,61,45],"class_list":["post-18211","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-activex-data-objects-ado","tag-databases","tag-operating-system","tag-scripting-guy","tag-search","tag-weekend-scripter","tag-windows-powershell"],"acf":[],"blog_post_summary":"

  Microsoft Scripting Guy Ed Wilson here. One of the cool things about using Windows PowerShell is the different objects with which you can interact. Windows Search is an example of this. By using ADO, you can query the Windows Search index and retrieve information about files. This technique can have some very interesting possibilities. […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/18211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=18211"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/18211\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=18211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=18211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=18211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}