We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Managed Workplace

Reporting Data Layer

  • Last updated on

This section provides detailed information about the following views:

  • Device
  • BandwidthData
  • WindowsEvent
  • CounterData
  • Counter
  • RemoteAccessSession
  • RemoteAccessSessionEvent
  • MWUser
  • Site
  • Ticket
  • IPAddress
  • Win32_OperatingSystem
  • Win32_SystemEnclosure
  • Win32_Processor
  • Win32_ComputerSystem
  • Win32_NetworkAdapterWin32_NetworkAdapterConfiguration

Views and Columns

Below are descriptions of the views and their columns that are exposed through the data layer.

Device

Discovered devices.

Column   

 

Description
DeviceGuid Uniquely identifies a device.
SiteID The site that this device belongs to.
Name The device's fully qualied domain name (FQDN).
Alias

An alias assigned to a device from the SC UI (optional). If no alias has been entered in the UI, is NULL.

SNMPName

The device name received via SNMP protocol. If the device is not managed by SNMP (SNMPEnabled = 0), is NULL.

CurrentStatus Indicates status. 1 - Up or 0 - Down
WmiEnabled

Indicates whether WMI protocol is enabled (TRUE) or not (FALSE).

SnmpEnabled

Indicates whether SNMP protocol is enabled (TRUE) or not (FALSE).

TimeCreated The date and time the device was created.
InventoryTag

The device inventory tag as entered in the SC UI. If no inventory tag has been entered in the UI, is NULL.

PhysicalLocation

The Device location as entered in the SC UI. if no physical location has been entered in the UI, is NULL.

Notes Notes entered for a device in the SC UI.
ActiveState

Indicates the device's state. Possible values are: Deleted = 0, Active = 1, DeleteConfirmed = 2, MarkedForExclusion = 3, Excluded = 4

TimeDeleted The date and time the device was deleted.
AMTEnabled

Indicates whether device is AMT enabled (TRUE) or not (FALSE).

ComputerName

The name of the computer. If the device is not managed by WMI (WMIEnabled = 0) or WSManagement (WSManEnabled = 0), is NULL.

IsDeviceManagerOnsite

Indicates whether DM device is onsite (TRUE), offsite (FALSE), or managed by an OM (NULL).

NetbiosName

The Netbios name. This name is retrieved via Netbios. If the device is not managed by WMI(WMIEnabled = 0) or WSManagement (WSManEnabled = 0), is NULL.

ProductionDate

The production date, entered from SC UI. If the production date has not been entered in the UI, is NULL.

SshEnabled

Indicates whether SSH protocol is enabled (TRUE) or not (FALSE).

IsRespondingToArp

Indicates whethe device responds to Arp (TRUE) or not (FALSE).

WSManEnabled

Indicates whether the device has WSMan enabled (TRUE) or not (FALSE).

TimeExcluded The date and time of the device exclusion.
SshName

The name of the device. Obtained through SSH protocol. If the device is not managed by SSH (SshEnabled = 0), is NULL.

Manufacturer

The name of the organization responsible for producing the device.

Model

The product name that the manufacturer gives to the device.

ShortDescription

A phrase that typically describes the operating system, form factor and network role.

OperatingSystemID

The operating system family. Possible values are: 0=Unknown, 1=Windows, 2=MacOsx, 3=Unix, 4=iOS, 5=Android, 6=Blackberry, 7=Windows Phone

NetworkRoleID

The role of the device on a network. Possible values are 0=Unknown, 1=NetworkDevice, 2=Server, 3=Workstation.

HardwareTypeID

The hardware type of the device. Possible values are Unknown = 0, Desktop = 1, Laptop = 2, Tablet = 3, MobilePhone = 4, RackMount = 5, Printer = 6, PizzaBox = 7, PhoneOrTablet = 9, VoipPhone = 10

SerialNumber The serial number for the device.
Shipped

Date and time (in UTC) when a device has been shipped from a manufacturer.

OutOfWarranty

Flag indicating whether device is out of warranty (TRUE) or not (FALSE).

DeviceWarrantyUrl URL for the device warranty.


BandwidthData

Bandwidth monitoring data points.

Column Description
DeviceGuid

The device that the bandwidth data was collected for. The foreign key for the Device table.

AssetObjectGuid

The network card that the bandwidth data was collected for.

SampleTimestamp

The date and time (in UTC) the bandwidth data was sampled.

CurrentBand-

widthInBps

The rate (in bits/second) at which bytes are received over the network adapter.


WindowsEvent

The events generated by the operating system of Windows devices.

Column Description
DeviceGuid The device that the Windows event was created for.
EventLog

The log that the event was generated in. Possible values are: Application, Security, Setup, or System.

EventSource

The application, service, or component that logged the event.

EventID

The unique value for the type of event and source, as given by the Vendor.

EventSeverity

The severity of the event. Possible values are: Information, Warning, Error, Success Audit or Failure Audit.

Description A description of the event.
OccurenceNbr

The number of occurrences of this event. If duplicate events are detected within the same 1 minute interval, the first event is retained and this value is incremented by 1 for each duplicate.

TimeOfEvent The date and time (in UTC) that the event was generated.


CounterData

Windows performance monitoring data points

Column Description
DeviceGuid

The device that the counter data was created for. The foreign key for the Device table.

SampleValue

The value of the counter at the time of the sample.

CounterID

The counter that the data was sampled for. The foreign key for the Counter table.

SampleTimestamp

The date and time (in UTC) the bandwidth data was sampled.

.
Counter

The details of the counters being monitored on devices.

Column Description
CounterID

A unique value used to identify a counter. The primary key for Counter records.

CounterName The name of the counter. For example: "% Free Space".
InstanceName The instance of the counter. For example: "C:".
CategoryName The category of the counter. For example: "Logical Disk".
CounterHelp

A description of the counter. For example: "% Free Space is the percentage of total usable space on the selected logical disk drive that was free."


RemoteAccessSession

Remote access sessions that were established to devices.

Column Description
SessionGuid

A unique value used to identify a remote access session. The primary key for RemoteAccessSession records.

DeviceGuid The device that the remote access session was created for. The foreign key for the Device table.
UserID The user that initiated the remote access session. The foreign key for User table.
TimeStarted The date and time (in UTC) the session started.
TimeEnded The date and time (in UTC) the session ended.
ServicePort The number of the port the session was hosted on.
ServiceName The name of the remote access application.
ServiceParameters The command line parameters used to execute the remote access viewer on the client device.
HostIPAddress The IP address of the host device.
ClientDNSName The DNS name of the client device.
ClientDNSName The IP Address of the client device.
Status The status of the session. Possible values are: 0 = Requested, 1 = Connected, 2 = Disconnected, Timed Out = 3, Error = 4
Notes Notes entered by the user who initiated the session.
TerminationReason A description of why the session was terminated.

TerminationReason

Code

The session was terminated. Possible values are: 0 = Unknown, 1 = UserClosedClientApplication, > 1 = Error

RemoteAccessSessionEvent

Additional details for Remote Tools sessions.

Column Description
SessionGuid The remote access session during which this tool was accessed.
EventData The name of the tool.
TimeOfEvent The date and time (in UTC) the tool was accessed.

MWUser

The user accounts in Service Center.

Column Description
UserID Uniquely identifies a user.
Name The unique login name of the user. For example: admin
FirstName The first name of the user.
LastName The last name of the user.
LastModified The last date and time that this information was updated, in UTC.
LastLoginDate The date and time that the user last logged into Service Center, in UTC.
IsLockedOut Indicates whether the user account is locked out (TRUE) or not (FALSE).
Status Indicates whether the user account is disabled (TRUE) or not (FALSE).
Email The email address of the user.

Site

Sites containing an Onsite Manager installation.

Column Description
SiteID Uniquely identifies a site.
SiteName A name provided by the user when creating the site.
Company The company name.
Street The street name.
POBox Post office box.
City The city.
Province The province.
PostalCode The postal code.
Country The country.
ContactName The contact name.
ContactPhone The contact phone number.
ContactEmail The contact email.

Ticket

Trouble tickets that were either created manually or generated automatically as the result of an alert action.

Column Description
TicketStatus Uniquely identifies a ticket.
ReportedSeverity The status of the ticket. Possible values for built-in statuses are: New, Open, Closed and Healed
AssignedSeverity The current severity assigned to the trouble ticket. Possible values are: 1=Info, 2=Warning, 3=Critical.
AssignedTo The user assigned to the trouble ticket.
AssignedBy The user that created the trouble ticket.
Title A short description of the trouble ticket.
Problem A description of the problem that needs to be resolved by the trouble ticket.
SiteID The site that the trouble ticket belongs to.
Priority The priority of the trouble ticket. Possible values are: 1=Low, 2=Medium, 3=High.
TicketCategoryID The category of the trouble ticket. Possible values are: 1=Onsite Manager Alerts, 2=Service Requests, 3=Hardware Problems, 4=Software Problems
Created The date and time (in UTC) that the trouble ticket was created.
LastModified The date and time (in UTC) that the trouble ticket was last modified.
Note Trouble ticket notes.

IPAddress

The IP addresses associated with the discovered devices

 

Column Description
IPAddressID Uniquely identifies an IP address.
DeviceGuid The device that this IP address belongs to.
Status The status of the IP address. Possible values are: 0 = Down, 1 = Up
MACAddress The Media Access Control (MAC) address associated with this IP.
DateModified The date and time that this information was last updated, in UTC.
Address The IP address (e.g. 192.168.0.1)

Win32_OperatingSystem

The operating systems on Windows devices.

Column Description
DeviceGuid The device that the operating system belongs to.
BootDevice The name of the disk drive from which the Win32 operating system boots. For example: \\Device\Harddisk0.
BuildNumber The build number of the operating system. It can be used for more precise versioning information than product release version numbers For example: 1381.
BuildType Indicates the type of build used for the operating system. For example: retail build and checked build.
Caption A one-line description of the object. The string includes the operating system version. For example, "Microsoft Windows 7 Enterprise ". This property can be localized.
CSCreationClassName Contains the scoping computer system's creation class name.
CSDVersion Contains a null-terminated string that indicates the latest Service Pack installed on the computer system. If no Service Pack is installed, the string is NULL. For computer systems running Windows 95, this property contains a null-terminated string that provides arbitrary additional information about the operating system. For example: Service Pack 3.
CSName Contains the scoping computer system's name.
CurrentTimeZone Indicates the number of minutes the operating system is offset from Greenwich Mean Time. The number can be positive, negative, or zero.
DataExecutionPrevention_32BitApplications Indicates if 32-bit applications are running with Data Execution Prevention (DEP) applied (TRUE) or not (FALSE). If DataExecutionPrevention_Available = FALSE, this property is also FALSE.
DataExecutionPrevention_Available Indicates if the hardware supports Windows Data Execution Prevention (DEP) technology (TRUE) or not (FALSE). DEP ensures that all memory locations are marked with a non-executable attribute unless the memory location explicitly contains executable code. This can help mitigate certain types of buffer overrun security exploits. If DEP is available, 64-bit applications are automatically protected. To determine if DEP has been enabled for 32-bit applications and drivers, use the DataExecutionPrevention_ properties.
InstallDate The date the object was installed. This property does not require a value to indicate that the object is installed.
LastBootUpTime The time when the operating system was last booted.
Manufacturer Indicates the name of the operating system manufacturer. For example, for Win32 systems, this value will be Microsoft Corporation.
NumberOfLicensedUsers The number of user licenses for the operating system. If unlimited, enter 0. If unknown, enter -1.
NumberOfProcesses The number of process contexts currently loaded or running on the operating system.
NumberOfUsers The number of user sessions for which the operating system is currently storing state information.
Organization Indicates the company name of the registered user's operating system. For example: Microsoft Corporation.
OSArchitecture Indicates the architecture of the operating system. For example: 32-bit, 64-bit Intel, 64-bit AMD.
OSLanguage Indicates which language version of the operating system is installed. For example: 0x0807 (German, Switzerland).
PAEEnabled Indicates if the physical address extensions (PAE) are enabled by the operating system running on Intel processors (TRUE) or not (FALSE). PAE lets applications address more than 4 GB of physical memory. When PAE is enabled, the operating system uses three-level linear address translation rather than two-level. Providing more physical memory to an application reduces the need to swap memory to the page file and increases performance. To enable PAE, use the "/PAE" switch in the Boot.ini file.
ProductType Indicates additional information about the system. This member can be one of the following values: 1 - Work Station 2 - Domain Controller 3 - Server.
RegisteredUser Indicates the name of the registered user of the operating system. For example: Jane Doe.
SerialNumber Indicates the operating system product serial identification number. For example:10497-OEM-0031416-71674.
ServicePackMajorVersion Indicates the major version number of the service pack installed on the computer system. If no service pack has been installed, the value is zero. Valid for computers running Windows 2000 and later. Otherwise, it is NULL.
ServicePackMinorVersion Indicates the minor version number of the service pack installed on the computer system. If no service pack has been installed, the value is zero. ServicePackMinorVersion is valid for computers running Windows 2000 and later. Otherwise, it is NULL.
Version The version number of the operating system. For example: 4.0.
WindowsDirectory The Windows directory of the operating system. For example: C:\WINDOWS.

Win32_SystemEnclosure

The physical system enclosures for Windows devices.

Column Description
DeviceGuid The device that the enclosure belongs to.
AudibleAlarm Indicates whether the frame is equipped with an audible alarm.
BreachDescription A free-form string providing more information on if the SecurityBreach property indicates that a breach or some other security-related event occurred.
CableManagementStrategy A free-form string containing information on how the various cables are connected and bundled for the frame. With many networking, storage-related and power cables, cable management can be a complex and challenging endeavor. This string property contains information to aid in assembly and service of the frame.
ChassisTypes An enumerated, integer-valued array indicating the type of chassis.
InstallDate The date and time the object was installed. This property does not require a value to indicate that the object is installed.
LockPresent Indicates whether the frame is protected with a lock (TRUE) or not (FALSE).
Manufacturer The name of the organization responsible for producing the physical element. If this is the entity from whom the element is purchased, it is contained in the Vendor property of CIM_Product.
Model The name by which the physical element is generally known.
Name The label by which the object is known.
PoweredOn Indicates whether the physical element is powered on (TRUE), or is currently off (FALSE).
Removable Indicates if the physical package is can be taken in and out of the physical container in which it is normally found without impairing the function of the overall packaging. A package can still be removable if power must be 'off' in order to perform the removal. If power can be 'on' and the package removed, then the element is removable and can be hot swapped. For example, an extra battery in a laptop is removable, as is a disk drive package inserted using SCA connectors. However, the latter can be hot swapped. A laptop's display is not removable, nor is a non-redundant power supply. Removing these components would impact the function of the overall packaging or is impossible due to the tight integration of the package.
Replaceable Indicates if it is possible to replace (FRU or upgrade) the physical package with a physically different one. For example, some computer systems allow the main processor chip to be upgraded to one of a higher clock rating. In this case, the processor is said to be replaceable. Another example is a power supply package mounted on sliding rails. All removable packages are inherently replaceable.
SecurityStatus Indicates the security setting for external input (such as a keyboard) to this computer.
SerialNumber A manufacturer-allocated number used to identify the PhysicalElement.
SKU The stock keeping unit number for this physical element.
SMBIOSAssetTag Indicates the asset tag number of the system enclosure.
Status The current status of an object.
Tag The Tag property is a string that uniquely identifies the system enclosure. For example: System Enclosure 1.
TypeDescriptions More information on the ChassisTypes array entries. Note, each entry of this array is related to the entry in ChassisTypes that is located at the same index.
VisibleAlarm Indicates whether the equipment includes a visible alarm (TRUE) or not (FALSE).


Win32_Processor

The processors on a Windows device.

Column Description
DeviceGuid The device that the processor belongs to.
AddressWidth The processor address width in bits.
Availability The availability and status of the device. For example, the Availability property indicates that the device is running and has full power (3), or is in a warning (4), test (5), degraded (10), or power save state (values 13-15 and 17). A value of 13 indicates that the device is known to be in a power save mode.
Caption A one-line string describing the object.
CpuStatus Specifies the current status of the processor. Changes in status arise from processor usage, not the physical condition of the processor.
CurrentClockSpeed The current speed of this processor, in MHz.
Description Description of the object.
ErrorCleared Indicated if the error reported in LastErrorCode property is cleared (TRUE) or not (FALSE).
ErrorDescription A free-form string supplying more information about the error recorded in LastErrorCode property, and information on any corrective actions that may be taken.
Family The processor family type. For example, values include Pentium(R) processor with MMX(TM) technology (14) and 68040 (96)."
InstallDate The date and time the object was installed. This property does not require a value to indicate that the object is installed.
L2CacheSize Specifies the size of the processor's Level 2 cache. A Level 2 cache is an external memory area that has faster access times than the main RAM memory.
LastErrorCode Captures the last error code reported by the logical device.
Manufacturer Specifies the name of the processor's manufacturer. For example: GenuineSilicon.
MaxClockSpeed The maximum speed (in MHz) of this processor.
Name The label by which the object is known.
NumberOfCores A Processor's total number of cores. For example, a dual core machine has NumberOfCores = 2.
NumberOfLogicalProcessors Specifies the total number of logical processors.
ProcessorType Specifies the processor's primary function.
Revision The Revision property specifies the system's architecture-dependent revision level. The meaning of this value depends on the architecture of the processor. It contains the same values as the Version member.
SocketDesignation The type of chip socket used on the circuit. For example: J202.
Status The current status of an object.
SystemName The scoping System's Name.
ThreadCount The number of threads per processor socket.

Win32_ComputerSystem

Base information about a Windows device.

Column Description
DeviceGuid The device that the system board belongs to.
AdminPasswordStatus The system-wide hardware security settings for Administrator Password Status.
AutomaticManagedPagefile Determines whether the automatic system managed pagefile is enabled (TRUE) or not (FALSE). This capability is not available on Windows Server 2003, XP, and lower.
AutomaticResetBootOption Determines whether the automatic reset boot option is enabled (TRUE), i.e. whether the machine will try to reboot after a system failure or not (FALSE).
AutomaticResetCapability Determines whether the auto reboot feature is enabled on this computer (TRUE) or not (FALSE). This capability is available on Windows NT but not on Windows 95.
BootROMSupported Determines whether a boot ROM is supported (TRUE) or not (FALSE).
BootupState Specifies how the system was started. Fail-safe boot (also called SafeBoot) bypasses the user's startup files. Constraints: Must have a value.
Caption A one-line description of the object.
ChassisBootupState The enclosure's bootup state.
CurrentTimeZone The amount of time the unitary computer system is offset from Coordinated Universal Time.
DaylightInEffect Specifies if the daylight savings is in effect (TRUE) or not (FALSE). If TRUE, daylight savings is presently being observed.
Description A description of the object.
DNSHostName The DNS host name of the local computer.
Domain The name of the domain to which the computer belongs.
DomainRole The role this computer plays within its assigned domain-workgroup. The domain-workgroup is a collection of computers on the same network. Possiable values are: 0=Standalone Workstation, 1=Member Server, 2=Standalone Server, 3=Member Server, 4=Backup Domain Controller, 5=Primary Domain Controller
EnableDaylightSavingsTime Indicates whether Daylight Savings Time is recognized on this machine (TRUE) or not (FALSE). If NULL, the status of DST is unknown on this system.
InstallDate The date the object was installed. An object does not need a value to indicate that it is installed.
KeyboardPasswordStatus The system-wide hardware security settings for Keyboard Password Status.
Manufacturer The name of the computer manufacturer.
Model The product name of the computer. From the manufacturer.
Name The label by which the object is known. When subclassed, the Name property can be overridden to be a Key property.
NetworkServerModeEnabled Determines whether Network Server Mode is enabled (TRUE) or not (FALSE).
NumberOfLogicalProcessors The number of logical processors currently available on the system.
NumberOfProcessors The number of physical processors currently available on the system, which is the number of processors whose status is enabled. Determined by enumerating the processor instances associated with the computer system object.
PartOfDomain Indicates whether the computer is part of a domain (TRUE) or workgroup (FALSE). If NULL, the computer is not part of a network group, or is unknown.
PCSystemType The type of PC a user is working with. For example, laptop, desktop, tablet-PC, etc.
PowerOnPasswordStatus Identifies the system-wide hardware security settings for Power On Password Status.
PowerState Indicates the current power state of the computer system and its associated operating system. Value 4 (Unknown) indicates the system is known to be in a power save mode, but its exact status in this mode is unknown; 2 (Low Power Mode) indicates the system is in a power save state but still functioning, and may exhibit degraded performance; 3 (Standby) indicates the system is not functioning but could be brought to full power 'quickly'; and value 7 (Warning) indicates the computerSystem is in a warning state, though also in a power save mode.
PowerSupplyState Identifies the state of the enclosure's power supply (or supplies) when last booted.
PrimaryOwnerName The name of the primary system owner.
ResetCapability If enabled (value = 4), the unitary computer system can be reset via hardware (e.g. the power and reset buttons). If disabled (value = 3), hardware reset is not allowed. If not implemented, value = 5.
ResetCount The number of automatic resets since the last intentional reset. A value of -1 indicates that the count is unknown.
ResetLimit The number of consecutive time the system reset will be attempted. A value of -1 indicates that the limit is unknown.
Status Current operational or non-operational status of an object. Operational statuses include: OK, Degraded, and Pred Fail, which is an element such as a SMART-enabled hard disk drive that may be functioning properly, but predicts a failure in the near future. Non-operational statuses include: Error, Starting, Stopping, and Service, which can apply during mirror-resilvering of a disk, reloading a user permissions list, or other administrative work.
SystemType Indicates the type of system running on the Win32 computer. Constraints: Must have a value.
ThermalState Identifies the enclosure's thermal state when last booted.
TotalPhysicalMemory Indicates the total size of physical memory. For example: 67108864.
UserName Indicates the name of the currently-logged-on user. Constraints: Must have a value. For example: johnsmith.
WakeUpType Indicates the event that caused the system to power up.
Workgroup The name of the workgroup. This value is only valid if the PartOfDomain property is FALSE.

Win32_NetworkAdapter

Column Description
DeviceGuid The device that the network adapter belongs to.
AdapterType The network medium in use. May not be applicable to all types of network adapters listed in this class. Windows NT only.
AdapterTypeId The network medium in use. This same information as the AdapterType property, except that the the information is returned in the form of an integer value: 0 - Ethernet 802.3 1 - Token Ring 802.5 2 - Fiber Distributed Data Interface (FDDI) 3 - Wide Area Network (WAN) 4 - LocalTalk 5 - Ethernet using DIX header format 6 - ARCNET 7 - ARCNET (878.2) 8 - ATM 9 - Wireless 10 - Infrared Wireless 11 - Bpc 12 - CoWan 13 - 1394. This property may not be applicable to all types of network adapters listed within this class. Windows NT only.
Availability The availability and status of the device. For example, the Availability property indicates that the device is running and has full power (3), or is in a warning (4), test (5), degraded (10) or power save state (values 13-15 and 17). Power Save - Unknown (13) indicates that the device is known to be in a power save mode.
Index Indicates the network adapter's index number, which is stored in the system registry. For example: 0.
InstallDate The date and time the object was installed. Does not need a value to indicate that the object is installed.
Installed Determines whether the network adapter is installed in the system (TRUE) or not (FALSE). The Installed property has been deprecated. There is no replacement value. This property is now considered obsolete.
InterfaceIndex The index value that uniquely identifies the local interface.
MACAddress Indicates the media access control address for this network adapter. A MAC address is a unique 48-bit number assigned to the network adapter by the manufacturer. It uniquely identifies this network adapter and is used for mapping TCP/IP network communications.
Manufacturer Indicates the name of the network adapter's manufacturer. For example: 3COM.
MaxNumberControlled Indicates the maximum number of directly addressable ports supported by this network adapter. A value of zero should be used if the number is unknown.
MaxSpeed The maximum speed for the network adapter, in bits per second.
Name The label by which the object is known. When subclassed, the property can be overridden to be a key property.
NetConnectionID Specifies the name of the network connection as it appears in the Network Connections folder.
NetConnectionStatus NetConnectionStatus is a string indicating the state of the network adapter's connection to the network. The value of the property is to be interpreted as follows: 0 - Disconnected 1 - Connecting 2 - Connected 3 - Disconnecting 4 - Hardware not present 5 - Hardware disabled 6 - Hardware malfunction 7 - Media disconnected 8 - Authenticating 9 - Authentication succeeded 10 - Authentication failed 11 - Invalid Address 12 - Credentials Required. 13 - 65536 Other - For integer values other than those listed above, refer to Win32 error code documentation.
NetEnabled Specifies whether the network connection is enabled or not.
NetworkAddresses An array of strings indicating the network addresses for an adapter.
PhysicalAdapter Specifies if the adapter is physical adapter (TRUE) or logical adapter (FALSE).
PowerManagementCapabilities The specific power-related capabilities of the logical device. Possible values are: 0=Unknown, 1=Not Supported, 2=Disabled, 3=Enabled, 4=Power Saving Modes Entered Automatically, 5=Power State Setting, 6=Power Cycling Supported, 7=Timed Power On Supported
PowerManagementSupported Indicates if the Device can be power managed - ie, put into a power save state (TRUE) or not (FALSE). Does not indicate that power management features are currently enabled, or if enabled, what features are supported. Refer to the PowerManagementCapabilities array for this information.
ProductName Indicates the product name of the network adapter. For example: Fast EtherLink XL.
ServiceName Indicates the service name of the network adapter. This name is usually shorter that the full product name. For example: Elnkii.
Speed An estimate of the current bandwidth in bits per second. For endpoints that vary in bandwidth or for those where no accurate estimation can be made, this property should contain the nominal bandwidth.
Status The current status of the object.
StatusInfo StatusInfo is a string indicating whether the logical device is in an enabled (3), disabled (4), or some other (1) or unknown (2) state. If this property does not apply to the logical device, use not applicable (5).
SystemName The scoping system's Name.
TimeOfLastReset Indicates when the network adapter was last reset.

Win32_NetworkAdapterConfiguration

The configuration of network adapters on Windows devices.

Column Description
DeviceGuid The device that the network adapter configuration belongs to.
ArpAlwaysSourceRoute Indicates if TCP/IP transmits the Address Resolution Protocol (ARP) queries using source routing enabled on Token Ring Networks (TRUE) or not (FALSE). By default, ARP first queries without source routing, and retries with source routing enabled if no reply was received. Source routing lets the routing of network packets across different types of networks. Default: FALSE.
ArpUseEtherSNAP Indicates whether Ethernet packets follow the IEEE 802.3 Sub-Network Access Protocol (SNAP) encoding (TRUE) or not (FALSE). Setting this parameter to 1 forces TCP/IP to transmit Ethernet packets using 802.3 SNAP encoding. By default, the stack transmits packets in DIX Ethernet format. Windows NT/Windows 2000 systems are able to receive both formats. Default: FALSE.
DefaultIPGateway Contains a list of IP addresses of default gateways used by the computer system. For example: 194.161.12.1 194.162.46.1.
DefaultTOS Indicates the default Type Of Service (TOS) value set in the header of outgoing IP packets. RFC 791 defines the values. Default: 0, Valid Range: 0 - 255.
DefaultTTL Indicates the default Time To Live (TTL) value set in the header of outgoing IP packets. The TTL specifies the number of routers an IP packet may pass through to reach its destination before being discarded. Each router decrements the TTL count of a packet by one as it passes through and discards the packets if the TTL is 0. Default: 32, Valid Range: 1 - 255.
Description A text description of the object.
DHCPEnabled Indicates if the dynamic host configuration protocol (DHCP) server automatically assigns an IP address to the computer system when establishing a network connection (TRUE) or not (FALSE).
DHCPLeaseExpires Indicates the expiration date and time for a leased IP address that was assigned to the computer by the dynamic host configuration protocol (DHCP) server. For example: 20521201000230.000000000.
DHCPLeaseObtained Indicates the date and time the lease was obtained for the IP address assigned to the computer by the dynamic host configuration protocol (DHCP) server. For example: 19521201000230.000000000.
DHCPServer Indicates the IP address of the dynamic host configuration protocol (DHCP) server. For example: 154.55.34.
DNSDomain Indicates an organization name, followed by a period and an extension that indicates the type of organization, such as microsoft.com. The name can be any combination of the letters A through Z, the numerals 0 through 9, and the hyphen (-), plus the period (.) character used as a separator. For example: microsoft.com.
DNSDomainSuffixSearchOrder Specifies the DNS domain suffixes to be appended to the end of host names during name resolution. When attempting to resolve a fully qualified domain name (FQDN) from a host only name, the system first appends the local domain name. If this is not successful, the system uses the domain suffix list to create additional FQDNs in the order listed and query DNS servers for each. For example: samples.microsoft.com example.microsoft.com.
DNSEnabledForWINSResolution Indicates if the Domain Name System (DNS) is enabled for name resolution over Windows Internet Naming Service (WINS) resolution (TRUE) or not (FALSE). If the name cannot be resolved using DNS, the name request is forwarded to WINS for resolution.
DNSHostName Indicates the host name used to identify the local computer for authentication by some utilities. Other TCP/IP-based utilities can use this value to acquire the name of the local computer. Host names are stored on DNS servers in a table that maps names to IP addresses for use by DNS. The name can be any combination of the letters A through Z, the numerals 0 through 9, and the hyphen (-), plus the period (.) character used as a separator. By default, this value is the Microsoft networking computer name, but the network administrator can assign another host name without affecting the computer name. For example: corpdns.
DNSServerSearchOrder Indicates an ordered list of server IP addresses to be used in querying for DNS Servers.
DomainDNSRegistrationEnabled Specifies whether the IP addresses for this connection are registered in DNS under the domain name of this connection, in addition to registering under the computer's full DNS name, (TRUE) or not (FALSE). The domain name of this connection is either set via the method SetDNSDomain() or assigned by DHCP. The registered name is the host name of the computer with the domain name appended. Windows 2000 only.
Index Specifies the index number of the Win32 network adapter configuration. Used when there is more than one configuration available.
IPAddress A list of all of the IP addresses associated with the current network adapter. For example: 155.34.22.0.
IPEnabled Indicates whether TCP/IP is bound and enabled on this network adapt.
IPFilterSecurityEnabled Indicates whether IP port security is enabled globally across all IP-bound network adapters (TRUE) or not (FALSE). This property is used in conjunction with IPSecPermitTCPPorts, IPSecPermitUDPPorts, and IPSecPermitIPProtocols. A value of TRUE indicates that IP port security is enabled and that the security values associated with individual network adapters are in effect. A value of FALSE indicates IP filter security is disabled across all network adapters and allows all port and protocol traffic to flow unfiltered.
IPSecPermitIPProtocols Lists the protocols permitted to run over the IP, defined using the EnableIPSec method. The list is either empty or contains numeric values. A numeric value of zero indicates access permission is granted for all protocols. An empty string indicates that no protocols are permitted to run when IPFilterSecurityEnabled is TRUE.
IPSecPermitTCPPorts Lists the ports granted access permission for TCP. The list of protocols is defined using the EnableIPSec method. The list is either empty or contains numeric values. A numeric value of zero indicates access permission is granted for all ports. An empty string indicates no ports are granted access permission when IPFilterSecurityEnabled is TRUE.
IPSecPermitUDPPorts Lists the ports granted User Datagram Protocol (UDP) access permission. The list of protocols is defined using the EnableIPSec method. The list is either empty or contains numeric values. A numeric value of zero indicates access permission is granted for all ports. An empty string indicates that no ports are granted access permission when IPFilterSecurityEnabled is TRUE.
IPSubnet Contains a list of the subnet masks associated with the current network adapter. For example: 255.255.0.
IPUseZeroBroadcast Indicates whether IP zeros-broadcasts are used (TRUE) or not (FALSE). If this parameter is set TRUE, then IP uses zeros-broadcasts (0.0.0.0), and the system uses ones-broadcasts (255.255.255.255). Computer systems generally use ones-broadcasts, but those derived from BSD implementations use zeros-broadcasts. Systems that do not use that same broadcasts will not interoperate on the same network. Default: FALSE.
KeepAliveInterval Indicates the interval separating Keep Alive Retransmissions until a response is received. Once a response is received, the delay until the next Keep Alive Transmission is again controlled by the value of KeepAliveTime. The connection is aborted after the number of retransmissions specified by TcpMaxDataRetransmissions have gone unanswered. Default: 1000, Valid Range: 1 - 0xFFFFFFFF.
KeepAliveTime Indicates how often the TCP attempts to verify that an idle connection is still intact by sending a Keep Alive Packet. A remote system that is reachable will acknowledge the keep alive transmission. Keep Alive packets are not sent by default. This feature may be enabled in a connection by an application. Default: 7,200,000 (two hours).
MACAddress Indicates the Media Access Control (MAC) address of the network adapter. A MAC address is assigned by the manufacturer to uniquely identify the network adapter. For example: 00:80:C7:8F:6C:96.
MTU Overrides the default Maximum Transmission Unit (MTU) for a network interface. The MTU is the maximum packet size (including the transport header) that the transport will transmit over the underlying network. The IP datagram can span multiple packets. The range of this value spans the minimum packet size (68) to the MTU supported by the underlying network.
NumForwardPackets Indicates the number of IP packet headers allocated for the router packet queue. When all headers are in use, the router discards packets from the queue at random. This value should be at least as large as the ForwardBufferMemory value divided by the maximum IP data size of the networks connected to the router. It should be no larger than the ForwardBufferMemory value divided by 256, since at least 256 bytes of forward buffer memory are used for each packet. The optimal number of forward packets for a given ForwardBufferMemory size depends on the type of traffic carried on the network. It will lie somewhere between these two values. If the router is not enabled, this parameter is ignored and no headers are allocated. Default: 50, Valid Range: 1 - 0xFFFFFFFE.
ServiceName The service name of the network adapter. Usually shorter than the full product name. For example: Elnkii.
SettingID The identifier by which the object is known.
TcpipNetbiosOptions Specifies a bitmap of the possible settings related to NetBIOS over TCP/IP. Windows 2000 only.
TcpMaxConnectRetransmissions Indicates the number of times TCP attempts to retransmit a Connect Request before terminating the connection. The initial retransmission timeout is 3 seconds. The retransmission timeout doubles for each attempt. Default: 3, Valid Range: 0 - 0xFFFFFFFF.
TcpMaxDataRetransmissions Indicates the number of times TCP retransmits an individual data segment (non-connect segment) before terminating the connection. The retransmission timeout doubles with each successive retransmission on a connection. Default: 5, Valid Range: 0 - 0xFFFFFFFF.
TcpNumConnections Indicates the maximum number of connections that TCP can have open simultaneously. Default: 0xFFFFFE, Valid Range: 0 - 0xFFFFFE.
WINSEnableLMHostsLookup Indicates whether local lookup files are used. Lookup files contain a map of IP addresses to host names. If they exist on the local system, they are found in %SystemRoot%\system32\drivers\etc.
WINSHostLookupFile Contains a path to a WINS lookup file on the local system. This file contains a map of IP addresses to host names. If the file specified in this property is found, it is copied to the %SystemRoot%\system32\drivers\etc folder of the local system. Valid only if the WINSEnableLMHostsLookup property is TRUE.
WINSPrimaryServer Indicates the IP address for the primary WINS server.
WINSScopeID Provides a way to isolate a group of computer systems that communicate with each other only. The Scope ID is a character string value that is appended to the end of the NetBIOS name. It is used for all NetBIOS transactions over TCP/IP communications from that computer system. Computers configured with identical Scope IDs are able to communicate with this computer. TCP/IP clients with different Scope IDs disregard packets from computers with this Scope ID. Valid only when the EnableWINS method executes successfully.
WINSSecondaryServer Indicates the IP address for the secondary WINS server.

Win32_LogicalDisk

The logical disks on Windows devices.

Column Description
DeviceGuid The device that the system board belongs to.
Compressed Indicates if the logical volume exists as a single compressed entity, such as a DoubleSpace volume (TRUE), or if file based compression is supported, such as on NTFS (FALSE).
Description A description of the object.
DriveType A numeric value corresponding to the type of disk drive this logical disk represents. Please refer to the Platform SDK documentation for additional values. For example: A CD-ROM drive returns 5.
FileSystem Indicates the file system on the logical disk. For example: NTFS.
FreeSpace Indicates how much free space is available on the logical disk, in bytes.
InstallDate The date and time the object was installed. Does not require a value to indicate that the object is installed.
LastErrorCode The last error code reported by the logical device.
MediaType Indicates the type of media currently present in the logical drive. This value will be one of the values of the MEDIA_TYPE enumeration defined in winioctl.h. Note: The value may not be exact for removable drives if currently there is no media in the drive.
Name The label by which the object is known. When subclassed, this property can be overridden to be a key property.
ProviderName Indicates the network path name to the logical device.
Size Indicates the size of the logical disk, in bytes.
Status The current operational or non-operational status of the object. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". "Service" could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, but the managed element is neither "OK" nor in one of the other states.
VolumeDirty Indicates if the disk requires chkdsk to be run at next boot up time (TRUE) or not (FALSE). The property is applicable to only those instances of logical disk that represent a physical disk in the machine. It is not applicable to mapped logical drives.
VolumeName Indicates the volume name of the logical disk. Maximum 32 characters.
VolumeSerialNumber Indicates the volume serial number of the logical disk. Maximum 11 characters. For example: A8C3-D032.

Win32_DiskDrive

The physical disks on Windows devices.

Column Description
DeviceGuid The device that the disk drive belongs to.
FirmwareRevision A manufacturer-allocated number used to identify the physical media.
Index The physical drive number of the given drive. This member is filled by Get Drive Map Info. A value of 0xFF indicates that the given drive does not map to a physical drive. For example: 1.
InstallDate The date and time the object was installed. This property does not need a value to indicate that the object is installed.
InterfaceType Indicates the interface type of physical disk drive. For example: SCSI.
LastErrorCode

Captures the last error code reported by the logical device.

Manufacturer Indicates the name of the disk drive manufacturer. For example: Seagate.
MediaType The type of media used or accessed by this device. For example: Removable media.
Model The manufacturer's model number of the disk drive. For example: ST32171W.
Name The label by which the object is known. When subclassed, the property can be overridden to be a key property.
SerialNumber A manufacturer-allocated number used to identify the physical media. For example: WD-WM3493798728 for a disk serial number.
Size Indicates the size of the disk drive. Calculated by multiplying the total number of cylinders, tracks in each cylinder, sectors in each track, and bytes in each sector.
Status The current operational or non-operational status of the object. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The status "Service" could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.

Win32_PhysicalMemory

The physical memory devices on Windows devices.

Column Description
DeviceGuid The device that the physical memory belongs to.
Capacity The total capacity of this physical memory, in bytes.
DeviceLocator The label of the socket or circuit board that holds this memory. For example: SIMM 3.
FormFactor The implementation form factor for the chip. For example, values such as SIMM (7), TSOP (9) or PGA (10) can be specified.
InstallDate The date and time the object was installed. This property does not need a value to indicate that the object is installed.
Manufacturer The name of the organization responsible for producing the physical element. This may be the entity from whom the element is purchased (also contained in the Vendor property of CIM_Product) or some other value.
MemoryType The type of physical memory.
Model The name by which the physical element is generally known.
PartNumber The part number assigned by the organization responsible for producing or manufacturing the physical element.
SerialNumber A manufacturer-allocated number used to identify the memory device.
Speed The speed of the physical memory, in nanoseconds.
Status The current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.
Tag A string that uniquely identifies the physical memory device represented by an instance of Win32_PhysicalMemory. For example: Physical Memory 1.

Win32_MotherboardDevice

The motherboards on Windows devices.

Column Description
DeviceGuid The device that the system board belongs to.
Availability Indicates the availability and status of the device. For example, the Availability property indicates that the device is running and has full power (3), or is in a warning (4), test (5), degraded (10), power save state (13-15 and 17), or in Power Save - Unknown mode (13).
InstallDate The date and time the object was installed. Does not need a value to indicate that the object is installed.
LastErrorCode

Captures the last error code reported by the logical device.

PowerManagementCapabilities Indicates the specific power-related capabilities of the logical device. Possible values are: 0=Unkown, 1=Not Supported, 2=Disabled, 3=Enabled, 4=Power Saving Modes Entered Automatically, 5=Power State Settable, 6=Power Cycling Supported, 7=Time Power On Supported
PowerManagementSupported Indicates if the Device can be power managed - ie, put into a power save state (TRUE) or not (FALSE). Does not indicate that power management features are currently enabled, or if enabled, what features are supported. Refer to the PowerManagementCapabilities array for this information.
PrimaryBusType Indicates the primary bus type of the motherboard. For example: PCI.
RevisionNumber Indicates the revision number of the motherboard. For example: 00.
SecondaryBusType Indicates the secondary bus type of the motherboard. For example: ISA.
Status The current operational or non-operational status of the object. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, but the managed element is neither "OK" nor in one of the other states.

Win32_Bios

The basic input/output services (BIOS) that are installed on Windows devices.

Column Description
DeviceGuid The device that the BIOS belongs to.
Description A description of the object.
Manufacturer The manufacturer of the software element.
Name The name used to identify this software element.
ReleaseDate The release date of the Win32 BIOS in the Coordinated Universal Time (UTC) format of YYYYMMDDHHMMSS.MMMMMM(+-)OOO.
SerialNumber The assigned serial number of this software element.
SMBIOSBIOSVersion The BIOS version as reported by SMBIOS.
SMBIOSMajorVersion The major SMBIOS version number. If SMBIOS not found, this property will be NULL.
SMBIOSMinorVersion The minor SMBIOS Version number. If SMBIOS not found, this property will be NULL.
Status The current status of the object. Various operational and Non-operational statuses can be defined. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.

Win32_BaseBoard

The system boards on Windows devices.

Column Description
DeviceGuid The device that the system board belongs to.
Manufacturer The name of the organization responsible for producing the physical element. This may be the entity from whom the element is purchased, but this is not necessarily true. The latter information is contained in the Vendor property of CIM_Product.
Model The name by which the physical element is generally known.
Name The label by which the object is known.
PartNumber The part number assigned by the organization responsible for producing or manufacturing the physical element.
PoweredOn Indicates if the physical element is powered on (TRUE), or is currently off (FALSE).
Product The base board part number defined by the manufacturer.
Removable Indicates if a physical package is removable. A physical package is removable if it is designed to be taken in and out of the physical container in which it is normally found, without impairing the function of the overall packaging. A package can still be removable if power must be 'off' in order to perform the removal. If power can be 'on' and the package removed, then the element is removable and can be hot swapped. For example, an extra battery in a laptop is removable, as is a disk drive package inserted using SCA connectors. However, the latter can be hot swapped. A laptop's display is not removable, nor is a non-redundant power supply. Removing these components would impact the function of the overall packaging or is impossible due to the tight integration of the package.
Replaceable Indicates if a physical package is replaceable. A physical package is replaceable if it is possible to replace (FRU or upgrade) the element with a physically different one. For example, some computer systems allow the main processor chip to be upgraded to one of a higher clock rating. In this case, the processor is said to be replaceable . Another example is a power supply package mounted on sliding rails. All removable packages are inherently replaceable.
SerialNumber A manufacturer-allocated number used to identify the PhysicalElement.
Status The current status of the object. Various operational and Non-operational statuses can be defined. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.
Version Indicates the version of the physical element.

Win32_QuickFixEngineering

Small operating system updates for Windows devices. Holds only the updates supplied by Component Based Servicing (CBS) and not those supplied by the Windows Installer (MSI) or Windows Update. Please see the Patch related views for information on all updates.

Column Description
DeviceGuid The device that the update belongs to.
Description A description of the object.
HotFixID The unique identifier associated with a particular QFE.
InstallDate The date and time the object was installed. This property does not require a value to indicate that the object is installed.
InstalledBy Identifies who installed the update. If this value is unknown, the property is empty.
InstalledOn The date and time the update was installed. If this value is unknown, the property is empty.
Status The current status of an object.

Win32_Service

The services running on Windows devices.

Column Description
DeviceGuid The device that the service belongs to.
Description A description of the object.
DesktopInteract Indicates whether the service can create or communicate with windows on the desktop (TRUE) or not (FALSE).
DisplayName The display name of the service. This string has a maximum length of 256 characters. The name is case-preserved in the Service Control Manager. DisplayName comparisons are always case-insensitive. Constraints: Accepts the same value as the Name property. For example: Atdisk.
ErrorControl Severity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors are logged by the computer system.
InstallDate The date and time the object was installed. This property does not require a value to indicate that the object is installed.
Name Uniquely identifies the service and provides an indication of the functionality that is managed. This functionality is described in more detail in the object's Description property.
PathName Contains the fully qualified path to the service binary file that implements the service. For example: \SystemRoot\System32\drivers\afd.sys.
ServiceType Supplies the type of service provided to calling processes.
Started Indicates whether the service has been started (TRUE), or stopped (FALSE).
StartMode Indicates the start mode of the Win32 base service. "Boot" specifies a device driver started by the operating system loader. This value is valid only for driver services. "System" specifies a device driver started by the IoInitSystem function. This value is valid only for driver services. "Automatic" specifies a service to be started automatically by the service control manager during system startup. "Manual" specifies a service to be started by the service control manager when a process calls the StartService function. "Disabled" specifies a service that can no longer be started."
StartName Indicates the account name under which the service runs. Depending on the service type, the account name may be in the form of "DomainName\Username". The service process is logged using one of these two forms when it runs. If the account belongs to the built-in domain, then ".\Username" can be specified. For kernel or system-level drivers, StartName contains the driver object name (that is, "\FileSystem\Rdr" or "\Driver\Xns") which the I/O system uses to load the device driver. Additionally, if NULL is specified, the driver runs with a default object name created by the I/O system based on the service name.
Status The current status of an object.



Last updated on