<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Scripting with WMI</title>
	<atom:link href="http://wmiscripting.wordpress.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://wmiscripting.wordpress.com</link>
	<description>Set objScript = GetObject("Alvin.Scripting")</description>
	<lastBuildDate>Wed, 09 Jan 2008 06:11:41 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='wmiscripting.wordpress.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://s2.wp.com/i/buttonw-com.png</url>
		<title>Scripting with WMI</title>
		<link>http://wmiscripting.wordpress.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://wmiscripting.wordpress.com/osd.xml" title="Scripting with WMI" />
	<atom:link rel='hub' href='http://wmiscripting.wordpress.com/?pushpress=hub'/>
		<item>
		<title>View a Share Permission</title>
		<link>http://wmiscripting.wordpress.com/2007/12/07/view-share-permission/</link>
		<comments>http://wmiscripting.wordpress.com/2007/12/07/view-share-permission/#comments</comments>
		<pubDate>Fri, 07 Dec 2007 07:26:37 +0000</pubDate>
		<dc:creator>scripter</dc:creator>
				<category><![CDATA[MS Windows]]></category>

		<guid isPermaLink="false">http://wmiscripting.wordpress.com/2007/12/07/view-share-permission/</guid>
		<description><![CDATA[Recently, I am being asked to come out with a script to read a share permissions and this can be achieved thru scripting with WMI…..:D Below is a sample code to read permissions from a share folder named &#8220;Share$&#8221; from a computer called &#8220;ABC-D-1234&#8243;. ===================================================== Dim strComputer Dim strShareName strComputer = &#8220;ABC-D-1234&#8243; strShareName = &#8220;Share$&#8221; [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=12&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Recently, I am being asked to come out with a script to read a share permissions and this can be achieved thru scripting with WMI…..:D</p>
<p>Below is a sample code to read permissions from a share folder named &#8220;Share$&#8221; from a computer called &#8220;ABC-D-1234&#8243;.<br />
=====================================================<br />
Dim strComputer<br />
Dim strShareName</p>
<p>strComputer = &#8220;ABC-D-1234&#8243;<br />
strShareName = &#8220;Share$&#8221;<br />
ViewSharePermission strComputer, strShareName</p>
<p>Sub ViewSharePermission(vComputer, vShareName)<br />
    Dim objWMIService  <br />
    Dim objFolderSecSetting<br />
    Dim objSecDescriptor<br />
    Dim intRetVal<br />
    Dim arrDACL<br />
    Dim objACE<br />
    Dim objTrustee<br />
 <br />
    On Error Resume Next</p>
<p>    &#8216;// Get Security Descriptor  <br />
    Set objWMIService = GetObject(&#8220;winmgmts:\\&#8221; &amp; vComputer &amp; &#8220;\root\cimv2&#8243;)<br />
    If Err &lt;&gt; 0 Then<br />
        Wscript.Echo &#8220;Connect to &#8221; &amp; vComputer &amp; &#8221; failed.&#8221;<br />
        Err.Clear<br />
        Exit Sub<br />
    End If</p>
<p>    Set objFolderSecSetting = objWMIService.Get(”Win32_LogicalShareSecuritySetting.Name=’” &amp; vShareName &amp; “‘”)<br />
    intRetVal = objFolderSecSetting.GetSecurityDescriptor(objSecDescriptor)</p>
<p>    If IsNull(objSecDescriptor.DACL) Then<br />
        ‘// Note: A NULL DACL gives full access to everyone, which is a serious security risk<br />
        CreateReport “Share Permission,” &amp; vShareName &amp; “,” &amp; “Everyone” &amp; “,” &amp; “Full Control”<br />
    Else<br />
        arrDACL = objSecDescriptor.DACL ‘// Get DACL (an array of Win32_ACE objects)<br />
        For Each objACE In arrDACL<br />
     Set objTrustee = objACE.Trustee<br />
            Wscript.Echo objTrustee.Name &amp; “: ” &amp; GetShareAccessMaskStr(objACE.AccessMask)<br />
        Next <br />
    End If</p>
<p>    Set objFolderSecSetting = Nothing<br />
    Set objWMIService = Nothing<br />
End Sub</p>
<p>Function GetShareAccessMaskStr(vAccessMaskVal)<br />
    Dim strTemp</p>
<p>    Select Case vAccessMaskVal<br />
        Case 2032127:  strTemp = “Full Control”<br />
        Case 1245631:  strTemp = “Change”<br />
        Case 1179817:  strTemp = “Read”   <br />
        Case Else: strTemp = “Access Mask ” &amp; vAccessMaskVal<br />
    End Select <br />
    GetShareAccessMaskStr = strTemp<br />
End Function</p>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/wmiscripting.wordpress.com/12/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/wmiscripting.wordpress.com/12/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/wmiscripting.wordpress.com/12/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/wmiscripting.wordpress.com/12/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/wmiscripting.wordpress.com/12/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/wmiscripting.wordpress.com/12/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/wmiscripting.wordpress.com/12/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/wmiscripting.wordpress.com/12/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/wmiscripting.wordpress.com/12/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/wmiscripting.wordpress.com/12/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=12&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://wmiscripting.wordpress.com/2007/12/07/view-share-permission/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/6dc2f3fff1657c4df55dcafd9f526900?s=96&#38;d=identicon" medium="image">
			<media:title type="html">Alvin</media:title>
		</media:content>
	</item>
		<item>
		<title>Restart a service remotely</title>
		<link>http://wmiscripting.wordpress.com/2007/11/28/restart-a-service-remotely/</link>
		<comments>http://wmiscripting.wordpress.com/2007/11/28/restart-a-service-remotely/#comments</comments>
		<pubDate>Wed, 28 Nov 2007 05:55:23 +0000</pubDate>
		<dc:creator>scripter</dc:creator>
				<category><![CDATA[MS Windows]]></category>

		<guid isPermaLink="false">http://wmiscripting.wordpress.com/2007/11/28/restart-a-service-remotely/</guid>
		<description><![CDATA[Just being asked by a few guys to have a script to restart a service remotely. Below is the example of source code to restart a &#8221;SMS Agent Host&#8221; service from a computer called &#8220;ABC-D-1234&#8243;  =====================================================  Dim strComputer Dim strServiceName  strComputer = &#8221;ABC-D-1234&#8243; strServiceName =  &#8221;CcmExec&#8221;  &#8217;// Stop Service   StartWin32Service strComputer, strServiceName, False  &#8217;// Pause to allow service to stop   Wscript.Sleep [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=11&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Just being asked by a few guys to have a script to restart a service remotely.</p>
<p>Below is the example of source code to restart a &#8221;SMS Agent Host&#8221; service from a computer called &#8220;ABC-D-1234&#8243; <br />
===================================================== <br />
Dim strComputer<br />
Dim strServiceName </p>
<p>strComputer = &#8221;ABC-D-1234&#8243;<br />
strServiceName =  &#8221;CcmExec&#8221;</p>
<p> &#8217;// Stop Service  <br />
StartWin32Service strComputer, strServiceName, False</p>
<p> &#8217;// Pause to allow service to stop  <br />
Wscript.Sleep 5000</p>
<p> &#8217;// Start Service  <br />
StartWin32Service strComputer, strServiceName, True</p>
<p>Sub StartWin32Service(vComputer, vServiceName, bStart)<br />
    Dim strWQL<br />
    Dim objWMIService<br />
    Dim colWinServiceSet<br />
    Dim objWinService<br />
    Dim intRetVal</p>
<p>    On Error Resume Next<br />
 <br />
    Set objWMIService = GetObject(&#8220;winmgmts:\\&#8221; &amp; vComputer &amp; &#8220;\root\cimv2&#8243;)<br />
    If Err &lt;&gt; 0 Then<br />
        Wscript.Echo &#8220;Connect to &#8221; &amp; vComputer &amp; &#8221; failed.&#8221;<br />
        Err.Clear<br />
        Exit Sub<br />
    End If</p>
<p>    strWQL = &#8220;SELECT * FROM Win32_Service&#8221;<br />
    strWQL = strWQL &amp; &#8221; WHERE Name = &#8216;&#8221; &amp; vServiceName &amp; &#8220;&#8216;&#8221;<br />
    Set colWinServiceSet = objWMIService.ExecQuery(strWQL)</p>
<p>    If colWinServiceSet.Count &gt; 0 Then</p>
<p>        For Each objWinService in colWinServiceSet</p>
<p>            If bStart = True Then  &#8216;// Start Service <br />
           <br />
                If objWinService.Started = False Then &#8216;// If Service is in Stop status<br />
                    intRetVal = objWinService.StartService<br />
                    If intRetVal = 0 Then <br />
                        Wscript.Echo &#8220;Start &#8221; &amp; vServiceName  &amp; &#8221; successful.&#8221;<br />
                    Else<br />
                        Wscript.Echo &#8220;Start &#8221; &amp; vServiceName &amp; &#8221; failed.&#8221;   <br />
                    End If<br />
                Else &#8216;// If Service is in Start status<br />
                    Wscript.Echo vServiceName &amp; &#8221; already started.&#8221;<br />
                End If</p>
<p>            Else  &#8216;// Stop Service<br />
          <br />
                If objWinService.Started = True Then &#8216;// If Service is in Start status<br />
                    intRetVal = objWinService.StopService<br />
                    If intRetVal = 0 Then<br />
                         Wscript.Echo &#8220;Stop &#8221; &amp; vServiceName &amp; &#8220; successful.&#8221;<br />
                    Else<br />
                         Wscript.Echo &#8220;Stop &#8221; &amp; vServiceName &amp; &#8221; failed.&#8221;<br />
                    End If<br />
                Else &#8216;// If Service is in Stop status<br />
                     Wscript.Echo vServiceName &amp; &#8221; already stopped.&#8221;<br />
                End If</p>
<p>            End If</p>
<p>        Next</p>
<p>    Else</p>
<p>         Wscript.Echo vServiceName &amp; &#8221; not found.&#8221;</p>
<p>    End If</p>
<p>    Set objWMIService = Nothing<br />
End Sub<br />
=====================================================<br />
<em>To use it, copy the script to a notepad and name it as &lt;name&gt;.vbs. Then, run it from the command prompt using this command: <strong>cscript &lt;name&gt;.vbs</strong>.</em></p>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/wmiscripting.wordpress.com/11/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/wmiscripting.wordpress.com/11/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/wmiscripting.wordpress.com/11/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/wmiscripting.wordpress.com/11/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/wmiscripting.wordpress.com/11/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/wmiscripting.wordpress.com/11/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/wmiscripting.wordpress.com/11/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/wmiscripting.wordpress.com/11/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/wmiscripting.wordpress.com/11/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/wmiscripting.wordpress.com/11/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=11&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://wmiscripting.wordpress.com/2007/11/28/restart-a-service-remotely/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/6dc2f3fff1657c4df55dcafd9f526900?s=96&#38;d=identicon" medium="image">
			<media:title type="html">Alvin</media:title>
		</media:content>
	</item>
		<item>
		<title>Kill a process from Task Manager</title>
		<link>http://wmiscripting.wordpress.com/2007/11/12/kill-a-process-in-task-manager/</link>
		<comments>http://wmiscripting.wordpress.com/2007/11/12/kill-a-process-in-task-manager/#comments</comments>
		<pubDate>Mon, 12 Nov 2007 15:23:26 +0000</pubDate>
		<dc:creator>scripter</dc:creator>
				<category><![CDATA[MS Windows]]></category>

		<guid isPermaLink="false">http://wmiscripting.wordpress.com/2007/11/12/kill-a-process-in-task-manager/</guid>
		<description><![CDATA[Today, one of my colleagues asking me for a script to kill a process from a computer&#8217;s Task Manager. Below is the coding that kill a process &#8211; &#8220;calc.exe&#8221; from a Task Manager of a computer named &#8220;ABC-D-1234&#8243;. Thus, to test the script, you can launch a calculater in the computer first before running the script. ===================================================== KillWin32Process &#8220;ABC-D-1234&#8243;, &#8220;calc.exe&#8221;  Sub [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=5&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Today, one of my colleagues asking me for a script to kill a process from a computer&#8217;s Task Manager.<br />
Below is the coding that kill a process &#8211; &#8220;calc.exe&#8221; from a Task Manager of a computer named &#8220;ABC-D-1234&#8243;. Thus, to test the script, you can launch a calculater in the computer first before running the script.<br />
=====================================================<br />
KillWin32Process &#8220;ABC-D-1234&#8243;, &#8220;calc.exe&#8221; </p>
<p>Sub KillWin32Process(vComputer, vProcessName)<br />
    Dim objWMIService<br />
    Dim strWQL<br />
    Dim colProcessSet<br />
    Dim objProcess<br />
   <br />
    On Error Resume Next</p>
<p>    Set objWMIService = GetObject(&#8220;winmgmts:\\&#8221; &amp; vComputer &amp; &#8220;\root\cimv2&#8243;)<br />
    If Err &lt;&gt; 0 Then<br />
        Wscript.Echo &#8220;Connect to &#8221; &amp; vComputer &amp; &#8221; failed.&#8221;<br />
        Err.Clear<br />
        Exit Sub<br />
    End If</p>
<p>    strWQL = &#8220;SELECT * FROM Win32_Process&#8221;<br />
    strWQL = strWQL &amp; &#8221; WHERE Name=&#8217;&#8221; &amp; vProcessName &amp; &#8220;&#8216;&#8221;<br />
    Set colProcessSet = objWMIService.ExecQuery(strWQL)</p>
<p>    If ColProcessSet.Count &gt; 0 Then<br />
        For Each objProcess In colProcessSet<br />
            objProcess.Terminate() &#8216;Kill Process<br />
            If Err = 0 Then<br />
                Wscript.Echo &#8220;Kill &#8221; &amp; vProcessName &amp; &#8221; successful.&#8221;<br />
            Else<br />
                Wscript.Echo &#8220;Kill &#8221; &amp; vProcessName &amp; &#8221; failed.&#8221;<br />
                Err.Clear<br />
            End IF<br />
        Next<br />
    Else<br />
        Wscript.Echo vProcessName &amp; &#8220; not found.&#8221;<br />
    End If<br />
 <br />
    Set colProcessSet = Nothing<br />
    Set objWMIService = Nothing<br />
End Sub<br />
===================================================== <br />
<em><em>To use it, copy the script to a notepad and name it as &lt;name&gt;.vbs. Then, run it from the command prompt using this command: <strong>cscript &lt;name&gt;.vbs</strong>.</em></em></p>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/wmiscripting.wordpress.com/5/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/wmiscripting.wordpress.com/5/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/wmiscripting.wordpress.com/5/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/wmiscripting.wordpress.com/5/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/wmiscripting.wordpress.com/5/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/wmiscripting.wordpress.com/5/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/wmiscripting.wordpress.com/5/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/wmiscripting.wordpress.com/5/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/wmiscripting.wordpress.com/5/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/wmiscripting.wordpress.com/5/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=5&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://wmiscripting.wordpress.com/2007/11/12/kill-a-process-in-task-manager/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/6dc2f3fff1657c4df55dcafd9f526900?s=96&#38;d=identicon" medium="image">
			<media:title type="html">Alvin</media:title>
		</media:content>
	</item>
		<item>
		<title>List all the &#8216;error&#8217; logs from an &#8216;Application&#8217; event log in a Event Viewer from a server</title>
		<link>http://wmiscripting.wordpress.com/2007/11/05/3/</link>
		<comments>http://wmiscripting.wordpress.com/2007/11/05/3/#comments</comments>
		<pubDate>Mon, 05 Nov 2007 15:18:36 +0000</pubDate>
		<dc:creator>scripter</dc:creator>
				<category><![CDATA[MS Windows]]></category>

		<guid isPermaLink="false">http://wmiscripting.wordpress.com/2007/11/05/3/</guid>
		<description><![CDATA[Someone was asking me whether this is possible. He felt troublesome everytime need to login to a server to check for the error logs of Application event log in a Event Viewer. He wanted a script that can extract those error logs of Application event.    With WMI Scripting, you can acheive that&#8230;. ==================================================     ListEventLog &#8220;ABC-S-1234&#8243;, &#8220;Application&#8221;, &#8220;Error&#8221; Sub ListEventLog(vComputer, vLogFile, vEventType) [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=3&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Someone was asking me whether this is possible.<br />
He felt troublesome everytime need to login to a server to check for the error logs of Application event log in a Event Viewer. He wanted a script that can extract those error logs of Application event.  </p>
<p> With WMI Scripting, you can acheive that&#8230;.<br />
==================================================    </p>
<p>ListEventLog &#8220;ABC-S-1234&#8243;, &#8220;Application&#8221;, &#8220;Error&#8221;</p>
<p>Sub ListEventLog(vComputer, vLogFile, vEventType)<br />
    Dim objWMIService<br />
    Dim strWQL<br />
    Dim colEventSet<br />
    Dim objEvent</p>
<p>    vComputer = &#8220;.&#8221;<br />
    Set objWMIService = GetObject(&#8220;winmgmts:\\&#8221; &amp; vComputer &amp; &#8220;\root\cimv2&#8243;)<br />
    If Err &lt;&gt; 0 Then<br />
        Wscript.Echo &#8220;Connect to &#8221; &amp; vComputer &amp; &#8221; failed.&#8221;<br />
        Err.Clear<br />
        Exit Sub<br />
    End If</p>
<p>    strWQL = &#8220;SELECT * FROM Win32_NTLogEvent&#8221;<br />
    strWQL = strWQL &amp; &#8221; WHERE Logfile = &#8216;&#8221; &amp; vLogFile &amp; &#8220;&#8216;&#8221;<br />
    Set colEventSet = objWMIService.ExecQuery(strWQL)   </p>
<p>    If colEventSet.Count &gt; 0 Then<br />
        For Each objEvent in colEventSet<br />
            If UCase(objEvent.Type) = UCase(vEventType) Then<br />
                WScript.Echo &#8220;Event Type: &#8221; &amp; objEvent.Type<br />
                WScript.Echo &#8220;Time Written: &#8221; &amp; objEvent.TimeWritten<br />
                WScript.Echo &#8220;Source Name: &#8221; &amp; objEvent.SourceName<br />
                WScript.Echo &#8220;Category: &#8221; &amp; objEvent.Category<br />
                WScript.Echo &#8220;Event Code: &#8221; &amp; objEvent.EventCode<br />
                WScript.Echo &#8220;User: &#8221; &amp; objEvent.User   <br />
                WScript.Echo &#8220;Computer Name: &#8221; &amp; objEvent.ComputerName<br />
                WScript.Echo &#8220;Message: &#8221; &amp; objEvent.Message<br />
            End If<br />
        Next<br />
    End If<br />
End Sub<br />
==================================================   <br />
<em><em>To use it, copy the script to a notepad and name it as &lt;name&gt;.vbs. Then, run it from the command prompt using this command: <strong>cscript &lt;name&gt;.vbs</strong>.</em></em></p>
<br /><img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/wmiscripting.wordpress.com/3/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/wmiscripting.wordpress.com/3/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/wmiscripting.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/wmiscripting.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/wmiscripting.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/wmiscripting.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/wmiscripting.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/wmiscripting.wordpress.com/3/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/wmiscripting.wordpress.com/3/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/wmiscripting.wordpress.com/3/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=wmiscripting.wordpress.com&amp;blog=2057910&amp;post=3&amp;subd=wmiscripting&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://wmiscripting.wordpress.com/2007/11/05/3/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/6dc2f3fff1657c4df55dcafd9f526900?s=96&#38;d=identicon" medium="image">
			<media:title type="html">Alvin</media:title>
		</media:content>
	</item>
	</channel>
</rss>
