We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Managed Workplace

Reporting Data Layer

  • Last updated on

This section provides detailed information about the following views:

  • Device
  • BandwidthData
  • WindowsEvent
  • CounterData
  • Counter
  • RemoteAccessSession
  • RemoteAccessSessionEvent
  • MWUser
  • Site
  • Ticket
  • IPAddress
  • Win32_OperatingSystem
  • Win32_SystemEnclosure
  • Win32_Processor
  • Win32_ComputerSystem
  • Win32_NetworkAdapterWin32_NetworkAdapterConfiguration

Views and Columns

Below are descriptions of the views and their columns that are exposed through the data layer.

Device

Discovered devices.

Column   

 

Description
DeviceGuidUniquely identifies a device.
SiteIDThe site that this device belongs to.
NameThe device's fully qualied domain name (FQDN).
Alias

An alias assigned to a device from the SC UI (optional). If no alias has been entered in the UI, is NULL.

SNMPName

The device name received via SNMP protocol. If the device is not managed by SNMP (SNMPEnabled = 0), is NULL.

CurrentStatusIndicates status. 1 - Up or 0 - Down
WmiEnabled

Indicates whether WMI protocol is enabled (TRUE) or not (FALSE).

SnmpEnabled

Indicates whether SNMP protocol is enabled (TRUE) or not (FALSE).

TimeCreatedThe date and time the device was created.
InventoryTag

The device inventory tag as entered in the SC UI. If no inventory tag has been entered in the UI, is NULL.

PhysicalLocation

The Device location as entered in the SC UI. if no physical location has been entered in the UI, is NULL.

NotesNotes entered for a device in the SC UI.
ActiveState

Indicates the device's state. Possible values are: Deleted = 0, Active = 1, DeleteConfirmed = 2, MarkedForExclusion = 3, Excluded = 4

TimeDeletedThe date and time the device was deleted.
AMTEnabled

Indicates whether device is AMT enabled (TRUE) or not (FALSE).

ComputerName

The name of the computer. If the device is not managed by WMI (WMIEnabled = 0) or WSManagement (WSManEnabled = 0), is NULL.

IsDeviceManagerOnsite

Indicates whether DM device is onsite (TRUE), offsite (FALSE), or managed by an OM (NULL).

NetbiosName

The Netbios name. This name is retrieved via Netbios. If the device is not managed by WMI(WMIEnabled = 0) or WSManagement (WSManEnabled = 0), is NULL.

ProductionDate

The production date, entered from SC UI. If the production date has not been entered in the UI, is NULL.

SshEnabled

Indicates whether SSH protocol is enabled (TRUE) or not (FALSE).

IsRespondingToArp

Indicates whethe device responds to Arp (TRUE) or not (FALSE).

WSManEnabled

Indicates whether the device has WSMan enabled (TRUE) or not (FALSE).

TimeExcludedThe date and time of the device exclusion.
SshName

The name of the device. Obtained through SSH protocol. If the device is not managed by SSH (SshEnabled = 0), is NULL.

Manufacturer

The name of the organization responsible for producing the device.

Model

The product name that the manufacturer gives to the device.

ShortDescription

A phrase that typically describes the operating system, form factor and network role.

OperatingSystemID

The operating system family. Possible values are: 0=Unknown, 1=Windows, 2=MacOsx, 3=Unix, 4=iOS, 5=Android, 6=Blackberry, 7=Windows Phone

NetworkRoleID

The role of the device on a network. Possible values are 0=Unknown, 1=NetworkDevice, 2=Server, 3=Workstation.

HardwareTypeID

The hardware type of the device. Possible values are Unknown = 0, Desktop = 1, Laptop = 2, Tablet = 3, MobilePhone = 4, RackMount = 5, Printer = 6, PizzaBox = 7, PhoneOrTablet = 9, VoipPhone = 10

SerialNumberThe serial number for the device.
Shipped

Date and time (in UTC) when a device has been shipped from a manufacturer.

OutOfWarranty

Flag indicating whether device is out of warranty (TRUE) or not (FALSE).

DeviceWarrantyUrlURL for the device warranty.


BandwidthData

Bandwidth monitoring data points.

ColumnDescription
DeviceGuid

The device that the bandwidth data was collected for. The foreign key for the Device table.

AssetObjectGuid

The network card that the bandwidth data was collected for.

SampleTimestamp

The date and time (in UTC) the bandwidth data was sampled.

CurrentBand-

widthInBps

The rate (in bits/second) at which bytes are received over the network adapter.


WindowsEvent

The events generated by the operating system of Windows devices.

ColumnDescription
DeviceGuidThe device that the Windows event was created for.
EventLog

The log that the event was generated in. Possible values are: Application, Security, Setup, or System.

EventSource

The application, service, or component that logged the event.

EventID

The unique value for the type of event and source, as given by the Vendor.

EventSeverity

The severity of the event. Possible values are: Information, Warning, Error, Success Audit or Failure Audit.

DescriptionA description of the event.
OccurenceNbr

The number of occurrences of this event. If duplicate events are detected within the same 1 minute interval, the first event is retained and this value is incremented by 1 for each duplicate.

TimeOfEventThe date and time (in UTC) that the event was generated.


CounterData

Windows performance monitoring data points

ColumnDescription
DeviceGuid

The device that the counter data was created for. The foreign key for the Device table.

SampleValue

The value of the counter at the time of the sample.

CounterID

The counter that the data was sampled for. The foreign key for the Counter table.

SampleTimestamp

The date and time (in UTC) the bandwidth data was sampled.

.
Counter

The details of the counters being monitored on devices.

ColumnDescription
CounterID

A unique value used to identify a counter. The primary key for Counter records.

CounterNameThe name of the counter. For example: "% Free Space".
InstanceNameThe instance of the counter. For example: "C:".
CategoryNameThe category of the counter. For example: "Logical Disk".
CounterHelp

A description of the counter. For example: "% Free Space is the percentage of total usable space on the selected logical disk drive that was free."


RemoteAccessSession

Remote access sessions that were established to devices.

ColumnDescription
SessionGuid

A unique value used to identify a remote access session. The primary key for RemoteAccessSession records.

DeviceGuidThe device that the remote access session was created for. The foreign key for the Device table.
UserIDThe user that initiated the remote access session. The foreign key for User table.
TimeStartedThe date and time (in UTC) the session started.
TimeEndedThe date and time (in UTC) the session ended.
ServicePortThe number of the port the session was hosted on.
ServiceNameThe name of the remote access application.
ServiceParametersThe command line parameters used to execute the remote access viewer on the client device.
HostIPAddressThe IP address of the host device.
ClientDNSNameThe DNS name of the client device.
ClientDNSNameThe IP Address of the client device.
StatusThe status of the session. Possible values are: 0 = Requested, 1 = Connected, 2 = Disconnected, Timed Out = 3, Error = 4
NotesNotes entered by the user who initiated the session.
TerminationReasonA description of why the session was terminated.

TerminationReason

Code

The session was terminated. Possible values are: 0 = Unknown, 1 = UserClosedClientApplication, > 1 = Error

RemoteAccessSessionEvent

Additional details for Remote Tools sessions.

ColumnDescription
SessionGuidThe remote access session during which this tool was accessed.
EventDataThe name of the tool.
TimeOfEventThe date and time (in UTC) the tool was accessed.

MWUser

The user accounts in Service Center.

ColumnDescription
UserIDUniquely identifies a user.
NameThe unique login name of the user. For example: admin
FirstNameThe first name of the user.
LastNameThe last name of the user.
LastModifiedThe last date and time that this information was updated, in UTC.
LastLoginDateThe date and time that the user last logged into Service Center, in UTC.
IsLockedOutIndicates whether the user account is locked out (TRUE) or not (FALSE).
StatusIndicates whether the user account is disabled (TRUE) or not (FALSE).
EmailThe email address of the user.

Site

Sites containing an Onsite Manager installation.

ColumnDescription
SiteIDUniquely identifies a site.
SiteNameA name provided by the user when creating the site.
CompanyThe company name.
StreetThe street name.
POBoxPost office box.
CityThe city.
ProvinceThe province.
PostalCodeThe postal code.
CountryThe country.
ContactNameThe contact name.
ContactPhoneThe contact phone number.
ContactEmailThe contact email.

Ticket

Trouble tickets that were either created manually or generated automatically as the result of an alert action.

ColumnDescription
TicketStatusUniquely identifies a ticket.
ReportedSeverityThe status of the ticket. Possible values for built-in statuses are: New, Open, Closed and Healed
AssignedSeverityThe current severity assigned to the trouble ticket. Possible values are: 1=Info, 2=Warning, 3=Critical.
AssignedToThe user assigned to the trouble ticket.
AssignedByThe user that created the trouble ticket.
TitleA short description of the trouble ticket.
ProblemA description of the problem that needs to be resolved by the trouble ticket.
SiteIDThe site that the trouble ticket belongs to.
PriorityThe priority of the trouble ticket. Possible values are: 1=Low, 2=Medium, 3=High.
TicketCategoryIDThe category of the trouble ticket. Possible values are: 1=Onsite Manager Alerts, 2=Service Requests, 3=Hardware Problems, 4=Software Problems
CreatedThe date and time (in UTC) that the trouble ticket was created.
LastModifiedThe date and time (in UTC) that the trouble ticket was last modified.
NoteTrouble ticket notes.

IPAddress

The IP addresses associated with the discovered devices

 

ColumnDescription
IPAddressIDUniquely identifies an IP address.
DeviceGuidThe device that this IP address belongs to.
StatusThe status of the IP address. Possible values are: 0 = Down, 1 = Up
MACAddressThe Media Access Control (MAC) address associated with this IP.
DateModifiedThe date and time that this information was last updated, in UTC.
AddressThe IP address (e.g. 192.168.0.1)

Win32_OperatingSystem

The operating systems on Windows devices.

ColumnDescription
DeviceGuidThe device that the operating system belongs to.
BootDeviceThe name of the disk drive from which the Win32 operating system boots. For example: \\Device\Harddisk0.
BuildNumberThe build number of the operating system. It can be used for more precise versioning information than product release version numbers For example: 1381.
BuildTypeIndicates the type of build used for the operating system. For example: retail build and checked build.
CaptionA one-line description of the object. The string includes the operating system version. For example, "Microsoft Windows 7 Enterprise ". This property can be localized.
CSCreationClassNameContains the scoping computer system's creation class name.
CSDVersionContains a null-terminated string that indicates the latest Service Pack installed on the computer system. If no Service Pack is installed, the string is NULL. For computer systems running Windows 95, this property contains a null-terminated string that provides arbitrary additional information about the operating system. For example: Service Pack 3.
CSNameContains the scoping computer system's name.
CurrentTimeZoneIndicates the number of minutes the operating system is offset from Greenwich Mean Time. The number can be positive, negative, or zero.
DataExecutionPrevention_32BitApplicationsIndicates if 32-bit applications are running with Data Execution Prevention (DEP) applied (TRUE) or not (FALSE). If DataExecutionPrevention_Available = FALSE, this property is also FALSE.
DataExecutionPrevention_AvailableIndicates if the hardware supports Windows Data Execution Prevention (DEP) technology (TRUE) or not (FALSE). DEP ensures that all memory locations are marked with a non-executable attribute unless the memory location explicitly contains executable code. This can help mitigate certain types of buffer overrun security exploits. If DEP is available, 64-bit applications are automatically protected. To determine if DEP has been enabled for 32-bit applications and drivers, use the DataExecutionPrevention_ properties.
InstallDateThe date the object was installed. This property does not require a value to indicate that the object is installed.
LastBootUpTimeThe time when the operating system was last booted.
ManufacturerIndicates the name of the operating system manufacturer. For example, for Win32 systems, this value will be Microsoft Corporation.
NumberOfLicensedUsersThe number of user licenses for the operating system. If unlimited, enter 0. If unknown, enter -1.
NumberOfProcessesThe number of process contexts currently loaded or running on the operating system.
NumberOfUsersThe number of user sessions for which the operating system is currently storing state information.
OrganizationIndicates the company name of the registered user's operating system. For example: Microsoft Corporation.
OSArchitectureIndicates the architecture of the operating system. For example: 32-bit, 64-bit Intel, 64-bit AMD.
OSLanguageIndicates which language version of the operating system is installed. For example: 0x0807 (German, Switzerland).
PAEEnabledIndicates if the physical address extensions (PAE) are enabled by the operating system running on Intel processors (TRUE) or not (FALSE). PAE lets applications address more than 4 GB of physical memory. When PAE is enabled, the operating system uses three-level linear address translation rather than two-level. Providing more physical memory to an application reduces the need to swap memory to the page file and increases performance. To enable PAE, use the "/PAE" switch in the Boot.ini file.
ProductTypeIndicates additional information about the system. This member can be one of the following values: 1 - Work Station 2 - Domain Controller 3 - Server.
RegisteredUserIndicates the name of the registered user of the operating system. For example: Jane Doe.
SerialNumberIndicates the operating system product serial identification number. For example:10497-OEM-0031416-71674.
ServicePackMajorVersionIndicates the major version number of the service pack installed on the computer system. If no service pack has been installed, the value is zero. Valid for computers running Windows 2000 and later. Otherwise, it is NULL.
ServicePackMinorVersionIndicates the minor version number of the service pack installed on the computer system. If no service pack has been installed, the value is zero. ServicePackMinorVersion is valid for computers running Windows 2000 and later. Otherwise, it is NULL.
VersionThe version number of the operating system. For example: 4.0.
WindowsDirectoryThe Windows directory of the operating system. For example: C:\WINDOWS.

Win32_SystemEnclosure

The physical system enclosures for Windows devices.

ColumnDescription
DeviceGuidThe device that the enclosure belongs to.
AudibleAlarmIndicates whether the frame is equipped with an audible alarm.
BreachDescriptionA free-form string providing more information on if the SecurityBreach property indicates that a breach or some other security-related event occurred.
CableManagementStrategyA free-form string containing information on how the various cables are connected and bundled for the frame. With many networking, storage-related and power cables, cable management can be a complex and challenging endeavor. This string property contains information to aid in assembly and service of the frame.
ChassisTypesAn enumerated, integer-valued array indicating the type of chassis.
InstallDateThe date and time the object was installed. This property does not require a value to indicate that the object is installed.
LockPresentIndicates whether the frame is protected with a lock (TRUE) or not (FALSE).
ManufacturerThe name of the organization responsible for producing the physical element. If this is the entity from whom the element is purchased, it is contained in the Vendor property of CIM_Product.
ModelThe name by which the physical element is generally known.
NameThe label by which the object is known.
PoweredOnIndicates whether the physical element is powered on (TRUE), or is currently off (FALSE).
RemovableIndicates if the physical package is can be taken in and out of the physical container in which it is normally found without impairing the function of the overall packaging. A package can still be removable if power must be 'off' in order to perform the removal. If power can be 'on' and the package removed, then the element is removable and can be hot swapped. For example, an extra battery in a laptop is removable, as is a disk drive package inserted using SCA connectors. However, the latter can be hot swapped. A laptop's display is not removable, nor is a non-redundant power supply. Removing these components would impact the function of the overall packaging or is impossible due to the tight integration of the package.
ReplaceableIndicates if it is possible to replace (FRU or upgrade) the physical package with a physically different one. For example, some computer systems allow the main processor chip to be upgraded to one of a higher clock rating. In this case, the processor is said to be replaceable. Another example is a power supply package mounted on sliding rails. All removable packages are inherently replaceable.
SecurityStatusIndicates the security setting for external input (such as a keyboard) to this computer.
SerialNumberA manufacturer-allocated number used to identify the PhysicalElement.
SKUThe stock keeping unit number for this physical element.
SMBIOSAssetTagIndicates the asset tag number of the system enclosure.
StatusThe current status of an object.
TagThe Tag property is a string that uniquely identifies the system enclosure. For example: System Enclosure 1.
TypeDescriptionsMore information on the ChassisTypes array entries. Note, each entry of this array is related to the entry in ChassisTypes that is located at the same index.
VisibleAlarmIndicates whether the equipment includes a visible alarm (TRUE) or not (FALSE).


Win32_Processor

The processors on a Windows device.

ColumnDescription
DeviceGuidThe device that the processor belongs to.
AddressWidthThe processor address width in bits.
AvailabilityThe availability and status of the device. For example, the Availability property indicates that the device is running and has full power (3), or is in a warning (4), test (5), degraded (10), or power save state (values 13-15 and 17). A value of 13 indicates that the device is known to be in a power save mode.
CaptionA one-line string describing the object.
CpuStatusSpecifies the current status of the processor. Changes in status arise from processor usage, not the physical condition of the processor.
CurrentClockSpeedThe current speed of this processor, in MHz.
DescriptionDescription of the object.
ErrorClearedIndicated if the error reported in LastErrorCode property is cleared (TRUE) or not (FALSE).
ErrorDescriptionA free-form string supplying more information about the error recorded in LastErrorCode property, and information on any corrective actions that may be taken.
FamilyThe processor family type. For example, values include Pentium(R) processor with MMX(TM) technology (14) and 68040 (96)."
InstallDateThe date and time the object was installed. This property does not require a value to indicate that the object is installed.
L2CacheSizeSpecifies the size of the processor's Level 2 cache. A Level 2 cache is an external memory area that has faster access times than the main RAM memory.
LastErrorCodeCaptures the last error code reported by the logical device.
ManufacturerSpecifies the name of the processor's manufacturer. For example: GenuineSilicon.
MaxClockSpeedThe maximum speed (in MHz) of this processor.
NameThe label by which the object is known.
NumberOfCoresA Processor's total number of cores. For example, a dual core machine has NumberOfCores = 2.
NumberOfLogicalProcessorsSpecifies the total number of logical processors.
ProcessorTypeSpecifies the processor's primary function.
RevisionThe Revision property specifies the system's architecture-dependent revision level. The meaning of this value depends on the architecture of the processor. It contains the same values as the Version member.
SocketDesignationThe type of chip socket used on the circuit. For example: J202.
StatusThe current status of an object.
SystemNameThe scoping System's Name.
ThreadCountThe number of threads per processor socket.

Win32_ComputerSystem

Base information about a Windows device.

ColumnDescription
DeviceGuidThe device that the system board belongs to.
AdminPasswordStatusThe system-wide hardware security settings for Administrator Password Status.
AutomaticManagedPagefileDetermines whether the automatic system managed pagefile is enabled (TRUE) or not (FALSE). This capability is not available on Windows Server 2003, XP, and lower.
AutomaticResetBootOptionDetermines whether the automatic reset boot option is enabled (TRUE), i.e. whether the machine will try to reboot after a system failure or not (FALSE).
AutomaticResetCapabilityDetermines whether the auto reboot feature is enabled on this computer (TRUE) or not (FALSE). This capability is available on Windows NT but not on Windows 95.
BootROMSupportedDetermines whether a boot ROM is supported (TRUE) or not (FALSE).
BootupStateSpecifies how the system was started. Fail-safe boot (also called SafeBoot) bypasses the user's startup files. Constraints: Must have a value.
CaptionA one-line description of the object.
ChassisBootupStateThe enclosure's bootup state.
CurrentTimeZoneThe amount of time the unitary computer system is offset from Coordinated Universal Time.
DaylightInEffectSpecifies if the daylight savings is in effect (TRUE) or not (FALSE). If TRUE, daylight savings is presently being observed.
DescriptionA description of the object.
DNSHostNameThe DNS host name of the local computer.
DomainThe name of the domain to which the computer belongs.
DomainRoleThe role this computer plays within its assigned domain-workgroup. The domain-workgroup is a collection of computers on the same network. Possiable values are: 0=Standalone Workstation, 1=Member Server, 2=Standalone Server, 3=Member Server, 4=Backup Domain Controller, 5=Primary Domain Controller
EnableDaylightSavingsTimeIndicates whether Daylight Savings Time is recognized on this machine (TRUE) or not (FALSE). If NULL, the status of DST is unknown on this system.
InstallDateThe date the object was installed. An object does not need a value to indicate that it is installed.
KeyboardPasswordStatusThe system-wide hardware security settings for Keyboard Password Status.
ManufacturerThe name of the computer manufacturer.
ModelThe product name of the computer. From the manufacturer.
NameThe label by which the object is known. When subclassed, the Name property can be overridden to be a Key property.
NetworkServerModeEnabledDetermines whether Network Server Mode is enabled (TRUE) or not (FALSE).
NumberOfLogicalProcessorsThe number of logical processors currently available on the system.
NumberOfProcessorsThe number of physical processors currently available on the system, which is the number of processors whose status is enabled. Determined by enumerating the processor instances associated with the computer system object.
PartOfDomainIndicates whether the computer is part of a domain (TRUE) or workgroup (FALSE). If NULL, the computer is not part of a network group, or is unknown.
PCSystemTypeThe type of PC a user is working with. For example, laptop, desktop, tablet-PC, etc.
PowerOnPasswordStatusIdentifies the system-wide hardware security settings for Power On Password Status.
PowerStateIndicates the current power state of the computer system and its associated operating system. Value 4 (Unknown) indicates the system is known to be in a power save mode, but its exact status in this mode is unknown; 2 (Low Power Mode) indicates the system is in a power save state but still functioning, and may exhibit degraded performance; 3 (Standby) indicates the system is not functioning but could be brought to full power 'quickly'; and value 7 (Warning) indicates the computerSystem is in a warning state, though also in a power save mode.
PowerSupplyStateIdentifies the state of the enclosure's power supply (or supplies) when last booted.
PrimaryOwnerNameThe name of the primary system owner.
ResetCapabilityIf enabled (value = 4), the unitary computer system can be reset via hardware (e.g. the power and reset buttons). If disabled (value = 3), hardware reset is not allowed. If not implemented, value = 5.
ResetCountThe number of automatic resets since the last intentional reset. A value of -1 indicates that the count is unknown.
ResetLimitThe number of consecutive time the system reset will be attempted. A value of -1 indicates that the limit is unknown.
StatusCurrent operational or non-operational status of an object. Operational statuses include: OK, Degraded, and Pred Fail, which is an element such as a SMART-enabled hard disk drive that may be functioning properly, but predicts a failure in the near future. Non-operational statuses include: Error, Starting, Stopping, and Service, which can apply during mirror-resilvering of a disk, reloading a user permissions list, or other administrative work.
SystemTypeIndicates the type of system running on the Win32 computer. Constraints: Must have a value.
ThermalStateIdentifies the enclosure's thermal state when last booted.
TotalPhysicalMemoryIndicates the total size of physical memory. For example: 67108864.
UserNameIndicates the name of the currently-logged-on user. Constraints: Must have a value. For example: johnsmith.
WakeUpTypeIndicates the event that caused the system to power up.
WorkgroupThe name of the workgroup. This value is only valid if the PartOfDomain property is FALSE.

Win32_NetworkAdapter

ColumnDescription
DeviceGuidThe device that the network adapter belongs to.
AdapterTypeThe network medium in use. May not be applicable to all types of network adapters listed in this class. Windows NT only.
AdapterTypeIdThe network medium in use. This same information as the AdapterType property, except that the the information is returned in the form of an integer value: 0 - Ethernet 802.3 1 - Token Ring 802.5 2 - Fiber Distributed Data Interface (FDDI) 3 - Wide Area Network (WAN) 4 - LocalTalk 5 - Ethernet using DIX header format 6 - ARCNET 7 - ARCNET (878.2) 8 - ATM 9 - Wireless 10 - Infrared Wireless 11 - Bpc 12 - CoWan 13 - 1394. This property may not be applicable to all types of network adapters listed within this class. Windows NT only.
AvailabilityThe availability and status of the device. For example, the Availability property indicates that the device is running and has full power (3), or is in a warning (4), test (5), degraded (10) or power save state (values 13-15 and 17). Power Save - Unknown (13) indicates that the device is known to be in a power save mode.
IndexIndicates the network adapter's index number, which is stored in the system registry. For example: 0.
InstallDateThe date and time the object was installed. Does not need a value to indicate that the object is installed.
InstalledDetermines whether the network adapter is installed in the system (TRUE) or not (FALSE). The Installed property has been deprecated. There is no replacement value. This property is now considered obsolete.
InterfaceIndexThe index value that uniquely identifies the local interface.
MACAddressIndicates the media access control address for this network adapter. A MAC address is a unique 48-bit number assigned to the network adapter by the manufacturer. It uniquely identifies this network adapter and is used for mapping TCP/IP network communications.
ManufacturerIndicates the name of the network adapter's manufacturer. For example: 3COM.
MaxNumberControlledIndicates the maximum number of directly addressable ports supported by this network adapter. A value of zero should be used if the number is unknown.
MaxSpeedThe maximum speed for the network adapter, in bits per second.
NameThe label by which the object is known. When subclassed, the property can be overridden to be a key property.
NetConnectionIDSpecifies the name of the network connection as it appears in the Network Connections folder.
NetConnectionStatusNetConnectionStatus is a string indicating the state of the network adapter's connection to the network. The value of the property is to be interpreted as follows: 0 - Disconnected 1 - Connecting 2 - Connected 3 - Disconnecting 4 - Hardware not present 5 - Hardware disabled 6 - Hardware malfunction 7 - Media disconnected 8 - Authenticating 9 - Authentication succeeded 10 - Authentication failed 11 - Invalid Address 12 - Credentials Required. 13 - 65536 Other - For integer values other than those listed above, refer to Win32 error code documentation.
NetEnabledSpecifies whether the network connection is enabled or not.
NetworkAddressesAn array of strings indicating the network addresses for an adapter.
PhysicalAdapterSpecifies if the adapter is physical adapter (TRUE) or logical adapter (FALSE).
PowerManagementCapabilitiesThe specific power-related capabilities of the logical device. Possible values are: 0=Unknown, 1=Not Supported, 2=Disabled, 3=Enabled, 4=Power Saving Modes Entered Automatically, 5=Power State Setting, 6=Power Cycling Supported, 7=Timed Power On Supported
PowerManagementSupportedIndicates if the Device can be power managed - ie, put into a power save state (TRUE) or not (FALSE). Does not indicate that power management features are currently enabled, or if enabled, what features are supported. Refer to the PowerManagementCapabilities array for this information.
ProductNameIndicates the product name of the network adapter. For example: Fast EtherLink XL.
ServiceNameIndicates the service name of the network adapter. This name is usually shorter that the full product name. For example: Elnkii.
SpeedAn estimate of the current bandwidth in bits per second. For endpoints that vary in bandwidth or for those where no accurate estimation can be made, this property should contain the nominal bandwidth.
StatusThe current status of the object.
StatusInfoStatusInfo is a string indicating whether the logical device is in an enabled (3), disabled (4), or some other (1) or unknown (2) state. If this property does not apply to the logical device, use not applicable (5).
SystemNameThe scoping system's Name.
TimeOfLastResetIndicates when the network adapter was last reset.

Win32_NetworkAdapterConfiguration

The configuration of network adapters on Windows devices.

ColumnDescription
DeviceGuidThe device that the network adapter configuration belongs to.
ArpAlwaysSourceRouteIndicates if TCP/IP transmits the Address Resolution Protocol (ARP) queries using source routing enabled on Token Ring Networks (TRUE) or not (FALSE). By default, ARP first queries without source routing, and retries with source routing enabled if no reply was received. Source routing lets the routing of network packets across different types of networks. Default: FALSE.
ArpUseEtherSNAPIndicates whether Ethernet packets follow the IEEE 802.3 Sub-Network Access Protocol (SNAP) encoding (TRUE) or not (FALSE). Setting this parameter to 1 forces TCP/IP to transmit Ethernet packets using 802.3 SNAP encoding. By default, the stack transmits packets in DIX Ethernet format. Windows NT/Windows 2000 systems are able to receive both formats. Default: FALSE.
DefaultIPGatewayContains a list of IP addresses of default gateways used by the computer system. For example: 194.161.12.1 194.162.46.1.
DefaultTOSIndicates the default Type Of Service (TOS) value set in the header of outgoing IP packets. RFC 791 defines the values. Default: 0, Valid Range: 0 - 255.
DefaultTTLIndicates the default Time To Live (TTL) value set in the header of outgoing IP packets. The TTL specifies the number of routers an IP packet may pass through to reach its destination before being discarded. Each router decrements the TTL count of a packet by one as it passes through and discards the packets if the TTL is 0. Default: 32, Valid Range: 1 - 255.
DescriptionA text description of the object.
DHCPEnabledIndicates if the dynamic host configuration protocol (DHCP) server automatically assigns an IP address to the computer system when establishing a network connection (TRUE) or not (FALSE).
DHCPLeaseExpiresIndicates the expiration date and time for a leased IP address that was assigned to the computer by the dynamic host configuration protocol (DHCP) server. For example: 20521201000230.000000000.
DHCPLeaseObtainedIndicates the date and time the lease was obtained for the IP address assigned to the computer by the dynamic host configuration protocol (DHCP) server. For example: 19521201000230.000000000.
DHCPServerIndicates the IP address of the dynamic host configuration protocol (DHCP) server. For example: 154.55.34.
DNSDomainIndicates an organization name, followed by a period and an extension that indicates the type of organization, such as microsoft.com. The name can be any combination of the letters A through Z, the numerals 0 through 9, and the hyphen (-), plus the period (.) character used as a separator. For example: microsoft.com.
DNSDomainSuffixSearchOrderSpecifies the DNS domain suffixes to be appended to the end of host names during name resolution. When attempting to resolve a fully qualified domain name (FQDN) from a host only name, the system first appends the local domain name. If this is not successful, the system uses the domain suffix list to create additional FQDNs in the order listed and query DNS servers for each. For example: samples.microsoft.com example.microsoft.com.
DNSEnabledForWINSResolutionIndicates if the Domain Name System (DNS) is enabled for name resolution over Windows Internet Naming Service (WINS) resolution (TRUE) or not (FALSE). If the name cannot be resolved using DNS, the name request is forwarded to WINS for resolution.
DNSHostNameIndicates the host name used to identify the local computer for authentication by some utilities. Other TCP/IP-based utilities can use this value to acquire the name of the local computer. Host names are stored on DNS servers in a table that maps names to IP addresses for use by DNS. The name can be any combination of the letters A through Z, the numerals 0 through 9, and the hyphen (-), plus the period (.) character used as a separator. By default, this value is the Microsoft networking computer name, but the network administrator can assign another host name without affecting the computer name. For example: corpdns.
DNSServerSearchOrderIndicates an ordered list of server IP addresses to be used in querying for DNS Servers.
DomainDNSRegistrationEnabledSpecifies whether the IP addresses for this connection are registered in DNS under the domain name of this connection, in addition to registering under the computer's full DNS name, (TRUE) or not (FALSE). The domain name of this connection is either set via the method SetDNSDomain() or assigned by DHCP. The registered name is the host name of the computer with the domain name appended. Windows 2000 only.
IndexSpecifies the index number of the Win32 network adapter configuration. Used when there is more than one configuration available.
IPAddressA list of all of the IP addresses associated with the current network adapter. For example: 155.34.22.0.
IPEnabledIndicates whether TCP/IP is bound and enabled on this network adapt.
IPFilterSecurityEnabledIndicates whether IP port security is enabled globally across all IP-bound network adapters (TRUE) or not (FALSE). This property is used in conjunction with IPSecPermitTCPPorts, IPSecPermitUDPPorts, and IPSecPermitIPProtocols. A value of TRUE indicates that IP port security is enabled and that the security values associated with individual network adapters are in effect. A value of FALSE indicates IP filter security is disabled across all network adapters and allows all port and protocol traffic to flow unfiltered.
IPSecPermitIPProtocolsLists the protocols permitted to run over the IP, defined using the EnableIPSec method. The list is either empty or contains numeric values. A numeric value of zero indicates access permission is granted for all protocols. An empty string indicates that no protocols are permitted to run when IPFilterSecurityEnabled is TRUE.
IPSecPermitTCPPortsLists the ports granted access permission for TCP. The list of protocols is defined using the EnableIPSec method. The list is either empty or contains numeric values. A numeric value of zero indicates access permission is granted for all ports. An empty string indicates no ports are granted access permission when IPFilterSecurityEnabled is TRUE.
IPSecPermitUDPPortsLists the ports granted User Datagram Protocol (UDP) access permission. The list of protocols is defined using the EnableIPSec method. The list is either empty or contains numeric values. A numeric value of zero indicates access permission is granted for all ports. An empty string indicates that no ports are granted access permission when IPFilterSecurityEnabled is TRUE.
IPSubnetContains a list of the subnet masks associated with the current network adapter. For example: 255.255.0.
IPUseZeroBroadcastIndicates whether IP zeros-broadcasts are used (TRUE) or not (FALSE). If this parameter is set TRUE, then IP uses zeros-broadcasts (0.0.0.0), and the system uses ones-broadcasts (255.255.255.255). Computer systems generally use ones-broadcasts, but those derived from BSD implementations use zeros-broadcasts. Systems that do not use that same broadcasts will not interoperate on the same network. Default: FALSE.
KeepAliveIntervalIndicates the interval separating Keep Alive Retransmissions until a response is received. Once a response is received, the delay until the next Keep Alive Transmission is again controlled by the value of KeepAliveTime. The connection is aborted after the number of retransmissions specified by TcpMaxDataRetransmissions have gone unanswered. Default: 1000, Valid Range: 1 - 0xFFFFFFFF.
KeepAliveTimeIndicates how often the TCP attempts to verify that an idle connection is still intact by sending a Keep Alive Packet. A remote system that is reachable will acknowledge the keep alive transmission. Keep Alive packets are not sent by default. This feature may be enabled in a connection by an application. Default: 7,200,000 (two hours).
MACAddressIndicates the Media Access Control (MAC) address of the network adapter. A MAC address is assigned by the manufacturer to uniquely identify the network adapter. For example: 00:80:C7:8F:6C:96.
MTUOverrides the default Maximum Transmission Unit (MTU) for a network interface. The MTU is the maximum packet size (including the transport header) that the transport will transmit over the underlying network. The IP datagram can span multiple packets. The range of this value spans the minimum packet size (68) to the MTU supported by the underlying network.
NumForwardPacketsIndicates the number of IP packet headers allocated for the router packet queue. When all headers are in use, the router discards packets from the queue at random. This value should be at least as large as the ForwardBufferMemory value divided by the maximum IP data size of the networks connected to the router. It should be no larger than the ForwardBufferMemory value divided by 256, since at least 256 bytes of forward buffer memory are used for each packet. The optimal number of forward packets for a given ForwardBufferMemory size depends on the type of traffic carried on the network. It will lie somewhere between these two values. If the router is not enabled, this parameter is ignored and no headers are allocated. Default: 50, Valid Range: 1 - 0xFFFFFFFE.
ServiceNameThe service name of the network adapter. Usually shorter than the full product name. For example: Elnkii.
SettingIDThe identifier by which the object is known.
TcpipNetbiosOptionsSpecifies a bitmap of the possible settings related to NetBIOS over TCP/IP. Windows 2000 only.
TcpMaxConnectRetransmissionsIndicates the number of times TCP attempts to retransmit a Connect Request before terminating the connection. The initial retransmission timeout is 3 seconds. The retransmission timeout doubles for each attempt. Default: 3, Valid Range: 0 - 0xFFFFFFFF.
TcpMaxDataRetransmissionsIndicates the number of times TCP retransmits an individual data segment (non-connect segment) before terminating the connection. The retransmission timeout doubles with each successive retransmission on a connection. Default: 5, Valid Range: 0 - 0xFFFFFFFF.
TcpNumConnectionsIndicates the maximum number of connections that TCP can have open simultaneously. Default: 0xFFFFFE, Valid Range: 0 - 0xFFFFFE.
WINSEnableLMHostsLookupIndicates whether local lookup files are used. Lookup files contain a map of IP addresses to host names. If they exist on the local system, they are found in %SystemRoot%\system32\drivers\etc.
WINSHostLookupFileContains a path to a WINS lookup file on the local system. This file contains a map of IP addresses to host names. If the file specified in this property is found, it is copied to the %SystemRoot%\system32\drivers\etc folder of the local system. Valid only if the WINSEnableLMHostsLookup property is TRUE.
WINSPrimaryServerIndicates the IP address for the primary WINS server.
WINSScopeIDProvides a way to isolate a group of computer systems that communicate with each other only. The Scope ID is a character string value that is appended to the end of the NetBIOS name. It is used for all NetBIOS transactions over TCP/IP communications from that computer system. Computers configured with identical Scope IDs are able to communicate with this computer. TCP/IP clients with different Scope IDs disregard packets from computers with this Scope ID. Valid only when the EnableWINS method executes successfully.
WINSSecondaryServerIndicates the IP address for the secondary WINS server.

Win32_LogicalDisk

The logical disks on Windows devices.

ColumnDescription
DeviceGuidThe device that the system board belongs to.
CompressedIndicates if the logical volume exists as a single compressed entity, such as a DoubleSpace volume (TRUE), or if file based compression is supported, such as on NTFS (FALSE).
DescriptionA description of the object.
DriveTypeA numeric value corresponding to the type of disk drive this logical disk represents. Please refer to the Platform SDK documentation for additional values. For example: A CD-ROM drive returns 5.
FileSystemIndicates the file system on the logical disk. For example: NTFS.
FreeSpaceIndicates how much free space is available on the logical disk, in bytes.
InstallDateThe date and time the object was installed. Does not require a value to indicate that the object is installed.
LastErrorCodeThe last error code reported by the logical device.
MediaTypeIndicates the type of media currently present in the logical drive. This value will be one of the values of the MEDIA_TYPE enumeration defined in winioctl.h. Note: The value may not be exact for removable drives if currently there is no media in the drive.
NameThe label by which the object is known. When subclassed, this property can be overridden to be a key property.
ProviderNameIndicates the network path name to the logical device.
SizeIndicates the size of the logical disk, in bytes.
StatusThe current operational or non-operational status of the object. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". "Service" could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, but the managed element is neither "OK" nor in one of the other states.
VolumeDirtyIndicates if the disk requires chkdsk to be run at next boot up time (TRUE) or not (FALSE). The property is applicable to only those instances of logical disk that represent a physical disk in the machine. It is not applicable to mapped logical drives.
VolumeNameIndicates the volume name of the logical disk. Maximum 32 characters.
VolumeSerialNumberIndicates the volume serial number of the logical disk. Maximum 11 characters. For example: A8C3-D032.

Win32_DiskDrive

The physical disks on Windows devices.

ColumnDescription
DeviceGuidThe device that the disk drive belongs to.
FirmwareRevisionA manufacturer-allocated number used to identify the physical media.
IndexThe physical drive number of the given drive. This member is filled by Get Drive Map Info. A value of 0xFF indicates that the given drive does not map to a physical drive. For example: 1.
InstallDateThe date and time the object was installed. This property does not need a value to indicate that the object is installed.
InterfaceTypeIndicates the interface type of physical disk drive. For example: SCSI.
LastErrorCode

Captures the last error code reported by the logical device.

ManufacturerIndicates the name of the disk drive manufacturer. For example: Seagate.
MediaTypeThe type of media used or accessed by this device. For example: Removable media.
ModelThe manufacturer's model number of the disk drive. For example: ST32171W.
NameThe label by which the object is known. When subclassed, the property can be overridden to be a key property.
SerialNumberA manufacturer-allocated number used to identify the physical media. For example: WD-WM3493798728 for a disk serial number.
SizeIndicates the size of the disk drive. Calculated by multiplying the total number of cylinders, tracks in each cylinder, sectors in each track, and bytes in each sector.
StatusThe current operational or non-operational status of the object. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The status "Service" could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.

Win32_PhysicalMemory

The physical memory devices on Windows devices.

ColumnDescription
DeviceGuidThe device that the physical memory belongs to.
CapacityThe total capacity of this physical memory, in bytes.
DeviceLocatorThe label of the socket or circuit board that holds this memory. For example: SIMM 3.
FormFactorThe implementation form factor for the chip. For example, values such as SIMM (7), TSOP (9) or PGA (10) can be specified.
InstallDateThe date and time the object was installed. This property does not need a value to indicate that the object is installed.
ManufacturerThe name of the organization responsible for producing the physical element. This may be the entity from whom the element is purchased (also contained in the Vendor property of CIM_Product) or some other value.
MemoryTypeThe type of physical memory.
ModelThe name by which the physical element is generally known.
PartNumberThe part number assigned by the organization responsible for producing or manufacturing the physical element.
SerialNumberA manufacturer-allocated number used to identify the memory device.
SpeedThe speed of the physical memory, in nanoseconds.
StatusThe current status of the object. Various operational and non-operational statuses can be defined. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.
TagA string that uniquely identifies the physical memory device represented by an instance of Win32_PhysicalMemory. For example: Physical Memory 1.

Win32_MotherboardDevice

The motherboards on Windows devices.

ColumnDescription
DeviceGuidThe device that the system board belongs to.
AvailabilityIndicates the availability and status of the device. For example, the Availability property indicates that the device is running and has full power (3), or is in a warning (4), test (5), degraded (10), power save state (13-15 and 17), or in Power Save - Unknown mode (13).
InstallDateThe date and time the object was installed. Does not need a value to indicate that the object is installed.
LastErrorCode

Captures the last error code reported by the logical device.

PowerManagementCapabilitiesIndicates the specific power-related capabilities of the logical device. Possible values are: 0=Unkown, 1=Not Supported, 2=Disabled, 3=Enabled, 4=Power Saving Modes Entered Automatically, 5=Power State Settable, 6=Power Cycling Supported, 7=Time Power On Supported
PowerManagementSupportedIndicates if the Device can be power managed - ie, put into a power save state (TRUE) or not (FALSE). Does not indicate that power management features are currently enabled, or if enabled, what features are supported. Refer to the PowerManagementCapabilities array for this information.
PrimaryBusTypeIndicates the primary bus type of the motherboard. For example: PCI.
RevisionNumberIndicates the revision number of the motherboard. For example: 00.
SecondaryBusTypeIndicates the secondary bus type of the motherboard. For example: ISA.
StatusThe current operational or non-operational status of the object. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, but the managed element is neither "OK" nor in one of the other states.

Win32_Bios

The basic input/output services (BIOS) that are installed on Windows devices.

ColumnDescription
DeviceGuidThe device that the BIOS belongs to.
DescriptionA description of the object.
ManufacturerThe manufacturer of the software element.
NameThe name used to identify this software element.
ReleaseDateThe release date of the Win32 BIOS in the Coordinated Universal Time (UTC) format of YYYYMMDDHHMMSS.MMMMMM(+-)OOO.
SerialNumberThe assigned serial number of this software element.
SMBIOSBIOSVersionThe BIOS version as reported by SMBIOS.
SMBIOSMajorVersionThe major SMBIOS version number. If SMBIOS not found, this property will be NULL.
SMBIOSMinorVersionThe minor SMBIOS Version number. If SMBIOS not found, this property will be NULL.
StatusThe current status of the object. Various operational and Non-operational statuses can be defined. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.

Win32_BaseBoard

The system boards on Windows devices.

ColumnDescription
DeviceGuidThe device that the system board belongs to.
ManufacturerThe name of the organization responsible for producing the physical element. This may be the entity from whom the element is purchased, but this is not necessarily true. The latter information is contained in the Vendor property of CIM_Product.
ModelThe name by which the physical element is generally known.
NameThe label by which the object is known.
PartNumberThe part number assigned by the organization responsible for producing or manufacturing the physical element.
PoweredOnIndicates if the physical element is powered on (TRUE), or is currently off (FALSE).
ProductThe base board part number defined by the manufacturer.
RemovableIndicates if a physical package is removable. A physical package is removable if it is designed to be taken in and out of the physical container in which it is normally found, without impairing the function of the overall packaging. A package can still be removable if power must be 'off' in order to perform the removal. If power can be 'on' and the package removed, then the element is removable and can be hot swapped. For example, an extra battery in a laptop is removable, as is a disk drive package inserted using SCA connectors. However, the latter can be hot swapped. A laptop's display is not removable, nor is a non-redundant power supply. Removing these components would impact the function of the overall packaging or is impossible due to the tight integration of the package.
ReplaceableIndicates if a physical package is replaceable. A physical package is replaceable if it is possible to replace (FRU or upgrade) the element with a physically different one. For example, some computer systems allow the main processor chip to be upgraded to one of a higher clock rating. In this case, the processor is said to be replaceable . Another example is a power supply package mounted on sliding rails. All removable packages are inherently replaceable.
SerialNumberA manufacturer-allocated number used to identify the PhysicalElement.
StatusThe current status of the object. Various operational and Non-operational statuses can be defined. Operational statuses include: "OK", "Degraded", and "Pred Fail" (an element, such as a SMART-enabled hard disk drive, may be functioning properly but predicting a failure in the near future). Non-operational statuses include: "Error", "Starting", "Stopping", and "Service". The latter, "Service", could apply during mirror-resilvering of a disk, reload of a user permissions list, or other administrative work. Not all such work is online, yet the managed element is neither "OK" nor in one of the other states.
VersionIndicates the version of the physical element.

Win32_QuickFixEngineering

Small operating system updates for Windows devices. Holds only the updates supplied by Component Based Servicing (CBS) and not those supplied by the Windows Installer (MSI) or Windows Update. Please see the Patch related views for information on all updates.

ColumnDescription
DeviceGuidThe device that the update belongs to.
DescriptionA description of the object.
HotFixIDThe unique identifier associated with a particular QFE.
InstallDateThe date and time the object was installed. This property does not require a value to indicate that the object is installed.
InstalledByIdentifies who installed the update. If this value is unknown, the property is empty.
InstalledOnThe date and time the update was installed. If this value is unknown, the property is empty.
StatusThe current status of an object.

Win32_Service

The services running on Windows devices.

ColumnDescription
DeviceGuidThe device that the service belongs to.
DescriptionA description of the object.
DesktopInteractIndicates whether the service can create or communicate with windows on the desktop (TRUE) or not (FALSE).
DisplayNameThe display name of the service. This string has a maximum length of 256 characters. The name is case-preserved in the Service Control Manager. DisplayName comparisons are always case-insensitive. Constraints: Accepts the same value as the Name property. For example: Atdisk.
ErrorControlSeverity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors are logged by the computer system.
InstallDateThe date and time the object was installed. This property does not require a value to indicate that the object is installed.
NameUniquely identifies the service and provides an indication of the functionality that is managed. This functionality is described in more detail in the object's Description property.
PathNameContains the fully qualified path to the service binary file that implements the service. For example: \SystemRoot\System32\drivers\afd.sys.
ServiceTypeSupplies the type of service provided to calling processes.
StartedIndicates whether the service has been started (TRUE), or stopped (FALSE).
StartModeIndicates the start mode of the Win32 base service. "Boot" specifies a device driver started by the operating system loader. This value is valid only for driver services. "System" specifies a device driver started by the IoInitSystem function. This value is valid only for driver services. "Automatic" specifies a service to be started automatically by the service control manager during system startup. "Manual" specifies a service to be started by the service control manager when a process calls the StartService function. "Disabled" specifies a service that can no longer be started."
StartNameIndicates the account name under which the service runs. Depending on the service type, the account name may be in the form of "DomainName\Username". The service process is logged using one of these two forms when it runs. If the account belongs to the built-in domain, then ".\Username" can be specified. For kernel or system-level drivers, StartName contains the driver object name (that is, "\FileSystem\Rdr" or "\Driver\Xns") which the I/O system uses to load the device driver. Additionally, if NULL is specified, the driver runs with a default object name created by the I/O system based on the service name.
StatusThe current status of an object.



Last updated on