PowerShell and WMI just seem to go together like peanut butter and jelly, beer and pretzels, or salt and pepper. However, discovering things about WMI isn't always so easy. There are plenty of tools and scripts that will help you uncover WMI goodness, but here's another one anyway. Today's PowerShell function will get all namespaces on a computer.<\/p>\n
The default namespace for Get-WMIObject is Root\\CimV2. But there are many other useful namespaces and classes that you can leverage in PowerShell. My function, Get-WMINamespace, will list either the top level namespaces or recursively search and return all namespaces. Here's the main function code.<\/p>\n
[cc lang=\"PowerShell\"]
\nFunction Get-WMINamespace {<\/p>\n
[cmdletBinding()]<\/p>\n
Param(
\n [Parameter(Position=0,Mandatory=$False,ValueFromPipeline=$True,ValueFromPipelineByPropertyName=$True)]
\n [ValidateNotNullorEmpty()]
\n [Alias(\"name\")]
\n [string]$Computername=$env:computername,
\n [object]$Credential,
\n [switch]$Recurse
\n)<\/p>\n
Begin {
\n Write-Verbose -Message \"$(Get-Date) Starting $($myinvocation.mycommand)\"
\n #convert credential to a PSCredential if a string was passed.
\n if ( $Credential -is [system.management.automation.psCredential]) {
\n\t\tWrite-Verbose \"$(Get-Date) Using PSCredential for $($credential.username)\"
\n\t}
\n\tElseIf ($Credential) {
\n\t\tWrite-Verbose \"$(Get-Date) Getting PSCredential for $credential\"
\n\t\t$Credential=Get-Credential $credential
\n\t}<\/p>\n
} #close Begin<\/p>\n
Process {<\/p>\n
#create a command string. PacketPrivacy is required for some namespaces
\n #like MicrosoftTPM
\n $cmd=\"Get-WMIObject -computername $computername -Namespace 'Root' -class '__Namespace' -authentication 'PacketPrivacy' -errorAction 'Stop'\"<\/p>\n
if ($recurse) {
\n $cmd+=\" -List -Recurse\"
\n }<\/p>\n
if ($Credential) {
\n $cmd+=\" -credential `$Credential\"
\n } <\/p>\n
Try
\n{
\n Write-Verbose -Message \"$(Get-Date) $cmd\"
\n $data=Invoke-Expression $cmd
\n}
\nCatch
\n{
\n Write-Warning \"Failed to retrieve namespace information from $Computername\"
\n Write-Error $_
\n}<\/p>\n
if ($data)
\n{
\n Write-Verbose \"$(Get-Date) Processing $(($data | measure-object).count) items\"<\/p>\n
if ($Recurse) {
\n #format the data to accomodate nested namespaces
\n $data | Sort __NAMESPACE | Select @{Name=\"Computername\";Expression={$_.__SERVER}},
\n @{Name=\"Namespace\";Expression={$_.__NAMESPACE}},
\n @{Name=\"Name\";Expression={Split-Path $_.__Namespace -Leaf }}
\n }
\n else {
\n $data | Sort __NAMESPACE | Select @{Name=\"Computername\";Expression={$_.__SERVER}},
\n @{Name=\"Namespace\";Expression={Join-path -Path $_.__NAMESPACE -ChildPath $_.Name }},Name
\n }
\n}<\/p>\n
} #close process<\/p>\n
End {
\n Write-Verbose -Message \"$(Get-Date) Ending $($myinvocation.mycommand)\"
\n } #close End<\/p>\n
} #end Function
\n [\/cc]<\/p>\n
The function only needs a few parameters. It defaults to the localhost but you can use -Computername to specify a different computer. For remote computers you can also specify either a saved PSCredential object or a user name to be used with Get-Credential.<\/p>\n
[cc lang=\"PowerShell\"]
\n #convert credential to a PSCredential if a string was passed.
\n if ( $Credential -is [system.management.automation.psCredential]) {
\n\t\tWrite-Verbose \"$(Get-Date) Using PSCredential for $($credential.username)\"
\n\t}
\n\tElseIf ($Credential) {
\n\t\tWrite-Verbose \"$(Get-Date) Getting PSCredential for $credential\"
\n\t\t$Credential=Get-Credential $credential
\n\t}
\n [\/cc]<\/p>\n
The function will only return top level namespaces, unless you use -Recurse. Because there are several ways to call Get-WMIObject based on my function parameters, I dynamically build a command string. The function starts out with the core expression.<\/p>\n
[cc lang=\"PowerShell\"]
\n#create a command string. PacketPrivacy is required for some namespaces
\n#like MicrosoftTPM
\n$cmd=\"Get-WMIObject -computername $computername -Namespace 'Root' -class '__Namespace' -authentication 'PacketPrivacy' -errorAction 'Stop'\"
\n[\/cc]<\/p>\n
If I'm recursing, then I append the necessary parameters.<\/p>\n
[cc lang=\"PowerShell\"]
\nif ($recurse) {
\n $cmd+=\" -List -Recurse\"
\n }
\n[\/cc]<\/p>\n
Finally, if a credential is passed, that too is added to the command string.<\/p>\n
[cc lang=\"PowerShell\"]
\n if ($Credential) {
\n $cmd+=\" -credential `$Credential\"
\n }
\n[\/cc]<\/p>\n
The tricky part that eluded me for a bit was to escape the $ in $Credential so that the final command string would include the right variable name. Once the command string is complete, I run it with Invoke-Expression.<\/p>\n
[cc lang=\"PowerShell\"]
\nTry
\n{
\n Write-Verbose -Message \"$(Get-Date) $cmd\"
\n $data=Invoke-Expression $cmd
\n}
\n[\/cc]<\/p>\n
Assuming data is returned, all that's left is to format the data. I need to make adjustments depending on whether the function searched recursively or not. Notice my use of the Path cmdlets to split or join the Namespace path.<\/p>\n
[cc lang=\"Powershell\"]
\nif ($Recurse) {
\n #format the data to accomodate nested namespaces
\n $data | Sort __NAMESPACE | Select @{Name=\"Computername\";Expression={$_.__SERVER}},
\n @{Name=\"Namespace\";Expression={$_.__NAMESPACE}},
\n @{Name=\"Name\";Expression={Split-Path $_.__Namespace -Leaf }}
\n }
\n else {
\n $data | Sort __NAMESPACE | Select @{Name=\"Computername\";Expression={$_.__SERVER}},
\n @{Name=\"Namespace\";Expression={Join-path -Path $_.__NAMESPACE -ChildPath $_.Name }},Name
\n }
\n[\/cc]<\/p>\n
Once the function is loaded into your session you can run it like this.<\/p>\n
[cc lang=\"DOS\"]<\/p>\n
PS C:\\> Get-WMINamespace<\/p>\n
Computername Namespace Name
\n------------ --------- ----
\nSERENITY ROOT\\Policy Policy
\nSERENITY ROOT\\Interop Interop
\nSERENITY ROOT\\WMI WMI
\nSERENITY ROOT\\directory directory
\nSERENITY ROOT\\Microsoft Microsoft
\nSERENITY ROOT\\aspnet aspnet
\nSERENITY ROOT\\ServiceModel ServiceModel
\nSERENITY ROOT\\SecurityCenter SecurityCenter
\nSERENITY ROOT\\RSOP RSOP
\nSERENITY ROOT\\CIMV2 CIMV2
\nSERENITY ROOT\\Cli Cli
\nSERENITY ROOT\\subscription subscription
\nSERENITY ROOT\\DEFAULT DEFAULT
\nSERENITY ROOT\\snmp snmp
\nSERENITY ROOT\\SecurityCenter2 SecurityCenter2
\nSERENITY ROOT\\nap nap
\nSERENITY ROOT\\SECURITY SECURITY<\/p>\n
PS C:\\> Get-WMINamespace -computername \"JDHIT-DC01\" -cred $jdhit -recurse | Select Namespace<\/p>\n
Namespace
\n---------
\nROOT
\nROOT\\aspnet
\nROOT\\CIMV2
\nROOT\\CIMV2\\Applications
\nROOT\\CIMV2\\Applications\\MicrosoftIE
\nROOT\\Cli
\nROOT\\DEFAULT
\nROOT\\directory
\nROOT\\directory\\LDAP
\nROOT\\Microsoft
\nROOT\\Microsoft\\HomeNet
\nROOT\\MicrosoftActiveDirectory
\nROOT\\MicrosoftDNS
\nROOT\\MicrosoftIISv2
\nROOT\\MicrosoftNLB
\nROOT\\MSCluster
\nROOT\\perfmon
\nROOT\\Policy
\nROOT\\RSOP
\nROOT\\RSOP\\Computer
\nROOT\\RSOP\\User
\nROOT\\RSOP\\User\\S_1_5_21_805063240_3875113082_2769008284_500
\nROOT\\SECURITY
\nROOT\\ServiceModel
\nROOT\\snmp
\nROOT\\snmp\\localhost
\nROOT\\subscription
\nROOT\\WMI
\n[\/cc]<\/p>\n
Enjoy!! <\/p>\n