Operating System Classes

The Operating System category groups classes that represent operating system related objects. They denote the various configurations and settings that define a computing environment. Examples include: the boot configuration, Component Object Model (COM) settings, desktop environment settings, drivers, security settings, user settings, and registry settings.

The Operating System category is grouped into the following subcategories:

COM

The COM subcategory groups classes that represent COM and DCOM settings, classes, and client application settings.

ClassDescription
Win32_ClassicCOMApplicationClasses

Association class

Relates a DCOM application and a COM component grouped under it.

Win32_ClassicCOMClass

Instance class

Represents the properties of a COM component.

Win32_ClassicCOMClassSettings

Association class

Relates a COM class and the settings used to configure instances of the COM class.

Win32_ClientApplicationSetting

Association class

Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.

Win32_COMApplication

Instance class

Represents a COM application.

Win32_COMApplicationClasses

Association class

Relates a COM component and the COM application where it resides.

Win32_COMApplicationSettings

Association class

Relates a DCOM application and its configuration settings.

Win32_COMClass

Instance class

Represents the properties of a COM component.

Win32_ComClassAutoEmulator

Association class

Relates a COM class and another COM class that it automatically emulates.

Win32_ComClassEmulator

Association class

Relates two versions of a COM class.

Win32_ComponentCategory

Instance class

Represents a component category.

Win32_COMSetting

Instance class

Represents the settings associated with a COM component or COM application.

Win32_DCOMApplication

Instance class

Represents the properties of a DCOM application.

Win32_DCOMApplicationAccessAllowedSetting

Association class

Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.

Win32_DCOMApplicationLaunchAllowedSetting

Association class

Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.

Win32_DCOMApplicationSetting

Instance class

Represents the settings of a DCOM application.

Win32_ImplementedCategory

Association class

Relates a component category and the COM class using its interfaces.

 

Desktop

The Desktop subcategory groups classes that represent objects that define a specific desktop configuration.

ClassDescription
Win32_Desktop

Instance class

Represents the common characteristics of a user's desktop.

Win32_Environment

Instance class

Represents an environment or system environment setting on a computer system running Windows.

Win32_TimeZone

Instance class

Represents the time zone information for a computer system running Windows.

Win32_UserDesktop

Association class

Relates a user account and the desktop settings that are specific to it.

 

Drivers

The Drivers subcategory groups classes that represent virtual device drivers and system drivers for base services.

ClassDescription
Win32_SystemDriver

Instance class

Represents the system driver for a base service.

 

File System

The File System subcategory groups classes that represent the way a hard disk is logically arranged. This includes the type of file system used, the directory structure, and way the disk is partitioned.

ClassDescription
Win32_CIMLogicalDeviceCIMDataFile

Association class

Relates logical devices and data files, indicating the driver files used by the device.

Win32_Directory

Instance class

Represents a directory entry on a computer system running Windows.

Win32_DirectorySpecification

Instance class

Represents the directory layout for the product.

Win32_DiskDriveToDiskPartition

Association class

Relates a disk drive and a partition existing on it.

Win32_DiskPartition

Instance class

Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.

Win32_DiskQuota

Association class

Tracks disk space usage for NTFS file system volumes.

Win32_LogicalDisk

Represents a data source that resolves to an actual local storage device on a computer system running Windows.

Win32_LogicalDiskRootDirectory

Association class

Relates a logical disk and its directory structure.

Win32_LogicalDiskToPartition

Association class

Relates a logical disk drive and the disk partition it resides on.

Win32_MappedLogicalDisk

Represents network storage devices that are mapped as logical disks on the computer system running Windows.

Win32_OperatingSystemAutochkSetting

Association class

Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.

Win32_QuotaSetting

Instance class

Contains setting information for disk quotas on a volume.

Win32_ShortcutFile

Instance class

Represents files that are shortcuts to other files, directories, and commands.

Win32_SubDirectory

Association class

Relates a directory (folder) and one of its subdirectories (subfolders).

Win32_SystemPartitions

Association class

Relates a computer system and a disk partition on that system.

Win32_Volume

Instance class

Represents an area of storage on a hard disk.

Win32_VolumeQuota

Association class

Relates a volume to the per volume quota settings.

Win32_VolumeQuotaSetting

Association class

Relates disk quota settings with a specific disk volume.

Win32_VolumeUserQuota

Association class

Relates per user quotas to quota-enabled volumes.

 

Job Objects

The Job Objects subcategory groups classes that represent classes that provide the means of instrumenting named job objects. An unnamed job object cannot be instrumented.

ClassDescription
Win32_CollectionStatistics

Association class

Relates a managed system element collection and the class representing statistical information about the collection.

Win32_LUID

Instance class

Represents a locally unique identifier (LUID)

Win32_LUIDandAttributes

Instance class

Represents a LUID and its attributes.

Win32_NamedJobObject

Instance class

Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.

Win32_NamedJobObjectActgInfo

Instance class

Represents the I/O accounting information for a job object.

Win32_NamedJobObjectLimit

Instance class

Represents an association between a job object and the job object limit settings.

Win32_NamedJobObjectLimitSetting

Instance class

Represents the limit settings for a job object.

Win32_NamedJobObjectProcess

Instance class

Relates a job object and the process contained in the job object.

Win32_NamedJobObjectSecLimit

Instance class

Relates a job object and the job object security limit settings.

Win32_NamedJobObjectSecLimitSetting

Instance class

Represents the security limit settings for a job object.

Win32_NamedJobObjectStatistics

Instance class

Represents an association between a job object and the job object I/O accounting information class.

Win32_SIDandAttributes

Instance class

Represents a security identifier (SID) and its attributes.

Win32_TokenGroups

Event class

Represents information about the group SIDs in an access token.

Win32_TokenPrivileges

Event class

Represents information about a set of privileges for an access token.

 

Memory and Page Files

The Memory and Page files subcategory groups classes that represent page file configuration settings.

ClassDescription
Win32_PageFile

Instance class

Represents the file used for handling virtual memory file swapping on a Windows system.

Win32_PageFileElementSetting

Association class

Relates the initial settings of a page file and the state of those settings during normal use.

Win32_PageFileSetting

Instance class

Represents the settings of a page file.

Win32_PageFileUsage

Instance class

Represents the file used for handling virtual memory file swapping on a computer system running Windows.

 

Multimedia Audio or Visual

The class in the Multimedia Audio or Visual subcategory represents properties of the audio or video codec installed on the computer system.

ClassDescription
Win32_CodecFile

Instance class

Represents the audio or video codec installed on the computer system.

 

Networking

The Networking subcategory groups classes that represent network connections, network clients, and network connection settings such as the protocol used.

ClassDescription
Win32_ActiveRoute

Association class

Relates the current IP4 route to the persisted IP route table.

Win32_IP4PersistedRouteTable

Instance class

Represents persisted IP routes.

Win32_IP4RouteTable

Instance class

Represents information that governs the routing of network data packets.

Win32_IP4RouteTableEvent

Event class

Represents IP route change events.

Win32_NetworkClient

Instance class

Represents a network client on a computer system running Windows.

Win32_NetworkConnection

Instance class

Represents an active network connection in a Windows environment.

Win32_NetworkProtocol

Instance class

Represents a protocol and its network characteristics on a computer system running Windows.

Win32_NTDomain

Instance class

Represents a Windows NT domain.

Win32_PingStatus

Instance class

Represents the values returned by the standard ping command.

Win32_ProtocolBinding

Association class

Relates a system-level driver, network protocol, and network adapter.

 

Operating System Events

The Operating System Events subcategory groups classes that represent events in the operating system related to processes, threads, and system shutdown.

ClassDescription
Win32_ComputerShutdownEvent

Event class

Represents computer shutdown events.

Win32_ComputerSystemEvent

Event class

Represents events related to a computer system.

Win32_DeviceChangeEvent

Event class

Represents device change events resulting from the addition, removal, or modification of devices on the computer system.

Win32_ModuleLoadTrace

Event class

Indicates that a process has loaded a new module.

Win32_ModuleTrace

Event class

Base event for module events.

Win32_ProcessStartTrace

Event class

Indicates that a new process has started.

Win32_ProcessStopTrace

Event class

Indicates that a process has terminated.

Win32_ProcessTrace

Event class

Base event for process events.

Win32_SystemConfigurationChangeEvent

Event class

Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).

Win32_SystemTrace

Event class

Base class for all system trace events, including module, process, and thread traces.

Win32_ThreadStartTrace

Event class

Indicates a new thread has started.

Win32_ThreadStopTrace

Event class

Indicates that a thread has stopped.

Win32_ThreadTrace

Event class

Base event class for thread events.

Win32_VolumeChangeEvent

Event class

Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

 

Operating System Settings

The Operating System Settings subcategory groups classes that represent the Operating System and its settings.

ClassDescription
Win32_BootConfiguration

Instance class

Represents the boot configuration of a computer system running Windows.

Win32_ComputerSystem

Instance class

Represents a computer system operating in a Windows environment.

Win32_ComputerSystemProcessor

Association class

Relates a computer system and a processor running on that system.

Win32_ComputerSystemProduct

Instance class

Represents a product.

Win32_DependentService

Association class

Relates two interdependent base services.

Win32_LoadOrderGroup

Instance class

Represents a group of system services that define execution dependencies.

Win32_LoadOrderGroupServiceDependencies

Instance class

Represents an association between a base service and a load order group that the service depends on to start running.

Win32_LoadOrderGroupServiceMembers

Association class

Relates a load order group and a base service.

Win32_OperatingSystem

Instance class

Represents an operating system installed on a computer system running Windows.

Win32_OperatingSystemQFE

Association class

Relates an operating system and product updates applied as represented in Win32_QuickFixEngineering.

Win32_OSRecoveryConfiguration

Instance class

Represents the types of information that will be gathered from memory when the operating system fails.

Win32_QuickFixEngineering

Instance class

Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

Win32_StartupCommand

Instance class

Represents a command that runs automatically when a user logs onto the computer system.

Win32_SystemBootConfiguration

Association class

Relates a computer system and its boot configuration.

Win32_SystemDesktop

Association class

Relates a computer system and its desktop configuration.

Win32_SystemDevices

Association class

Relates a computer system and a logical device installed on that system.

Win32_SystemLoadOrderGroups

Association class

Relates a computer system and a load order group.

Win32_SystemNetworkConnections

Association class

Relates a network connection and the computer system on which it resides.

Win32_SystemOperatingSystem

Association class

Relates a computer system and its operating system.

Win32_SystemProcesses

Association class

Relates a computer system and a process running on that system.

Win32_SystemProgramGroups

Association class

Relates a computer system and a logical program group.

Win32_SystemResources

Association class

Relates a system resource and the computer system it resides on.

Win32_SystemServices

Association class

Relates a computer system and a service program that exists on the system.

Win32_SystemSetting

Association class

Relates a computer system and a general setting on that system.

Win32_SystemSystemDriver

Association class

Relates a computer system and a system driver running on that computer system.

Win32_SystemTimeZone

Association class

Relates a computer system and a time zone.

Win32_SystemUsers

Association class

Relates a computer system and a user account on that system.

 

Processes

The Processes subcategory groups classes that represent system processes and threads.

ClassDescription
Win32_Process

Instance class

Represents a sequence of events on a computer system running Windows.

Win32_ProcessStartup

Instance class

Represents the startup configuration of a computer system running Windows.

Win32_Thread

Instance class

Represents a thread of execution.

 

Registry

The class in the Registry subcategory represents the contents of the Windows registry.

ClassDescription
Win32_Registry

Instance class

Represents the system registry on a computer system running Windows.

 

Scheduler Jobs

The Scheduler Jobs subcategory groups classes that represent scheduled job settings.

ClassDescription
Win32_CurrentTime

Abstract class

Represents an instance in time as component seconds, minutes, day of the week, and so on.

Win32_ScheduledJob

Instance class

Represents a job scheduled using the Windows schedule service.

Win32_LocalTime

Instance class

Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.

Win32_UTCTime

Instance class

Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.

 

Security

The Security subcategory groups classes that represent system security settings.

ClassDescription
Win32_AccountSID

Association class

Relates a security account instance with a security descriptor instance.

Win32_ACE

Instance class

Represents an access control entry (ACE).

Win32_LogicalFileAccess

Association class

Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).

Win32_LogicalFileAuditing

Association class

Relates the security settings of a file or directory one member of its system access control list (SACL).

Win32_LogicalFileGroup

Association class

Relates the security settings of a file or directory and its group.

Win32_LogicalFileOwner

Association class

Relates the security settings of a file or directory and its owner.

Win32_LogicalFileSecuritySetting

Instance class

Represents security settings for a logical file.

Win32_LogicalShareAccess

Association class

Relates the security settings of a share and one member of its DACL.

Win32_LogicalShareAuditing

Association class

Relates the security settings of a share and one member of its SACL.

Win32_LogicalShareSecuritySetting

Instance class

Represents security settings for a logical file.

Win32_PrivilegesStatus

Instance class

Represents information about the privileges required to complete an operation.

Win32_SecurityDescriptor

Instance class

Represents a structural representation of a SECURITY_DESCRIPTOR.

Win32_SecuritySetting

Instance class

Represents security settings for a managed element.

Win32_SecuritySettingAccess

Instance class

Represents the rights granted and denied to a trustee for a given object.

Win32_SecuritySettingAuditing

Instance class

Represents the auditing for a given trustee on a given object.

Win32_SecuritySettingGroup

Association class

Relates the security of an object and its group.

Win32_SecuritySettingOfLogicalFile

Instance class

Represents security settings of a file or directory object.

Win32_SecuritySettingOfLogicalShare

Instance class

Represents security settings of a shared object.

Win32_SecuritySettingOfObject

Association class

Relates an object to its security settings.

Win32_SecuritySettingOwner

Association class

Relates the security settings of an object and its owner.

Win32_SID

Instance class

Represents an arbitrary SID.

Win32_Trustee

Instance class

Represents a trustee.

 

Services

The Services subcategory groups classes that represent services and base services.

ClassDescription
Win32_BaseService

Instance class

Represents executable objects that are installed in a registry database maintained by the Service Control Manager.

Win32_Service

Instance class

Represents a service on a computer system running Windows.

 

Shares

The Shares subcategory groups classes that represent details of shared resources, such as printers and folders.

ClassDescription
Win32_DFSNode

Association class

Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).

Win32_DFSNodeTarget

Association class

Represents the relationship of a DFS node to one of its targets.

Win32_DFSTarget

Association class

Represents the target of a DFS node.

Win32_ServerConnection

Instance class

Represents the connections made from a remote computer to a shared resource on the local computer.

Win32_ServerSession

Instance class

Represents the sessions that are established with the local computer by users on a remote computer.

Win32_ConnectionShare

Association class

Relates a shared resource on the computer and the connection made to the shared resource.

Win32_PrinterShare

Association class

Relates a local printer and the share that represents it as it is viewed over a network.

Win32_SessionConnection

Association class

Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.

Win32_SessionProcess

Association class

Represents an association between a logon session and the processes associated with that session.

Win32_ShareToDirectory

Association class

Relates a shared resource on the computer system and the directory to which it is mapped.

Win32_Share

Instance class

Represents a shared resource on a computer system running Windows.

 

Start Menu

The Start Menu subcategory groups classes that represent program groups.

ClassDescription
Win32_LogicalProgramGroup

Instance class

Represents a program group in a computer system running Windows.

Win32_LogicalProgramGroupDirectory

Association class

Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.

Win32_LogicalProgramGroupItem

Instance class

Represents an element contained by a Win32_ProgramGroup instance, that is not itself another Win32_ProgramGroup instance.

Win32_LogicalProgramGroupItemDataFile

Association class

Relates the program group items of the Start menu, and the files in which they are stored.

Win32_ProgramGroupContents

Association class

Relates a program group order and an individual program group or item contained in it.

Win32_ProgramGroupOrItem

Instance class

Represents a logical grouping of programs on the user's Start|Programs menu.

 

Storage

The Users subcategory groups classes that represent storage information.

ClassDescription
Win32_ShadowBy

Association class

Represents the association between a shadow copy and the provider that creates the shadow copy.

Win32_ShadowContext

Association class

Specifies how a shadow copy is to be created, queried, or deleted.

Win32_ShadowCopy

Instance class

Represents a duplicate copy of the original volume at a previous time.

Win32_ShadowDiffVolumeSupport

Association class

Represents an association between a shadow copy provider and a storage volume.

Win32_ShadowFor

Association class

Represents an association between a shadow copy and the volume for which the shadow copy is created.

Win32_ShadowOn

Association class

Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowProvider

Association class

Represents a component that creates and represents volume shadow copies.

Win32_ShadowStorage

Association class

Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowVolumeSupport

Association class

Represents an association between a shadow copy provider with a supported volume.

Win32_Volume

Instance class

Represents an area of storage on a hard disk.

Win32_VolumeUserQuota

Association class

Represents a volume to the per volume quota settings.

 

Users

The Users subcategory groups classes that represent user account information, such as group membership details.

ClassDescription
Win32_Account

Instance class

Represents information about user accounts and group accounts known to the computer system running Windows.

Win32_Group

Instance class

Represents data about a group account.

Win32_GroupInDomain

Association class

Identifies the group accounts associated with a Windows NT domain.

Win32_GroupUser

Association class

Relates a group and an account that is a member of that group.

Win32_LogonSession

Instance class

Describes the logon session or sessions associated with a user logged on to Windows.

Win32_LogonSessionMappedDisk

Instance class

Represents the mapped logical disks associated with the session.

Win32_NetworkLoginProfile

Instance class

Represents the network login information of a specific user on a computer system running Windows.

Win32_SystemAccount

Instance class

Represents a system account.

Win32_UserAccount

Instance class

Represents information about a user account on a computer system running Windows.

Win32_UserInDomain

Association class

Relates a user account and a Windows NT domain.

 

Windows Event Log

The Windows Event Log subcategory groups classes that represent events, event log entries, event log configuration settings, and so on.

ClassDescription
Win32_NTEventlogFile

Instance class

Represents data stored in a Windows Event log file.

Win32_NTLogEvent

Instance class

Represents Windows events.

Win32_NTLogEventComputer

Association class

Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.

Win32_NTLogEventLog

Association class

Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.

Win32_NTLogEventUser

Association class

Relates instances of Win32_NTLogEvent and Win32_UserAccount.

 

Windows Product Activation

Windows Product Activation (WPA) is an antipiracy technology to reduce the casual copying of software.

ClassDescription
Win32_ComputerSystemWindowsProductActivationSetting

Association class

Relates instances of Win32_ComputerSystem and Win32_WindowsProductActivation.

Win32_Proxy

Instance class

Contains properties and methods to query and configure an Internet connection related to WPA.

Win32_WindowsProductActivation

Instance class

Contains properties and methods related to WPA.

 

Related topics

Win32 Classes

 

 

Show: