Operating System Classes

The Operating System category groups classes that represent operating system related objects. They denote the various configurations and settings that define a computing environment. Examples include: the boot configuration, Component Object Model (COM) settings, desktop environment settings, drivers, security settings, user settings, and registry settings.

The Operating System category is grouped into the following subcategories:

  • COM
  • Desktop
  • Drivers
  • Event log
  • File system
  • Job objects
  • Memory and page files
  • Multimedia audio or visual
  • Networking
  • Operating system events
  • Operating system settings
  • Processes
  • Registry
  • Scheduler jobs
  • Security
  • Services
  • Shares
  • Start menu
  • Storage
  • Users
  • Windows product activation

COM

The COM subcategory groups classes that represent COM and DCOM settings, classes, and client application settings.

Class Description
Win32_ClassicCOMApplicationClasses

Association class

Relates a DCOM application and a COM component grouped under it.

Win32_ClassicCOMClass Instance class

Represents the properties of a COM component.

Win32_ClassicCOMClassSettings Association class

Relates a COM class and the settings used to configure instances of the COM class.

Win32_ClientApplicationSetting Association class

Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.

Win32_COMApplication Instance class

Represents a COM application.

Win32_COMApplicationClasses Association class

Relates a COM component and the COM application where it resides.

Win32_COMApplicationSettings Association class

Relates a DCOM application and its configuration settings.

Win32_COMClass Instance class

Represents the properties of a COM component.

Win32_ComClassAutoEmulator Association class

Relates a COM class and another COM class that it automatically emulates.

Win32_ComClassEmulator Association class

Relates two versions of a COM class.

Win32_ComponentCategory Instance class

Represents a component category.

Win32_COMSetting Instance class

Represents the settings associated with a COM component or COM application.

Win32_DCOMApplication Instance class

Represents the properties of a DCOM application.

Win32_DCOMApplicationAccessAllowedSetting Association class

Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.

Win32_DCOMApplicationLaunchAllowedSetting Association class

Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.

Win32_DCOMApplicationSetting Instance class

Represents the settings of a DCOM application.

Win32_ImplementedCategory Association class

Relates a component category and the COM class using its interfaces.

 

Desktop

The Desktop subcategory groups classes that represent objects that define a specific desktop configuration.

Class Description
Win32_Desktop Instance class

Represents the common characteristics of a user's desktop.

Win32_Environment Instance class

Represents an environment or system environment setting on a computer system running Windows.

Win32_TimeZone Instance class

Represents the time zone information for a computer system running Windows.

Win32_UserDesktop Association class

Relates a user account and the desktop settings that are specific to it.

 

Drivers

The Drivers subcategory groups classes that represent virtual device drivers and system drivers for base services.

Class Description
Win32_DriverVXD Instance class

Represents a virtual device driver on a Windows computer system.

Win32_SystemDriver Instance class

Represents the system driver for a base service.

 

File System

The File System subcategory groups classes that represent the way a hard disk is logically arranged. This includes the type of file system used, the directory structure, and way the disk is partitioned.

Class Description
Win32_CIMLogicalDeviceCIMDataFile Association class

Relates logical devices and data files, indicating the driver files used by the device.

Win32_Directory Instance class

Represents a directory entry on a computer system running Windows.

Win32_DirectorySpecification Instance class

Represents the directory layout for the product.

Win32_DiskDriveToDiskPartition Association class

Relates a disk drive and a partition existing on it.

Win32_DiskPartition Instance class

Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.

Win32_DiskQuota Association class

Tracks disk space usage for NTFS file system volumes.

Win32_LogicalDisk Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory Association class

Relates a logical disk and its directory structure.

Win32_LogicalDiskToPartition Association class

Relates a logical disk drive and the disk partition it resides on.

Win32_MappedLogicalDisk Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_OperatingSystemAutochkSetting Association class

Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.

Win32_QuotaSetting Instance class

Contains setting information for disk quotas on a volume.

Win32_ShortcutFile Instance class

Represents files that are shortcuts to other files, directories, and commands.

Win32_SubDirectory Association class

Relates a directory (folder) and one of its subdirectories (subfolders).

Win32_SystemPartitions Association class

Relates a computer system and a disk partition on that system.

Win32_Volume Instance class

Represents an area of storage on a hard disk.

Win32_VolumeQuota Association class

Relates a volume to the per volume quota settings.

Win32_VolumeQuotaSetting Association class

Relates disk quota settings with a specific disk volume.

Win32_VolumeUserQuota Association class

Relates per user quotas to quota-enabled volumes.

 

Job Objects

The Job Objects subcategory groups classes that represent classes that provide the means of instrumenting named job objects. An unnamed job object cannot be instrumented.

Class Description
Win32_CollectionStatistics Association class

Relates a managed system element collection and the class representing statistical information about the collection.

Win32_LUID Instance class

Represents a locally unique identifier (LUID)

Win32_LUIDandAttributes Instance class

Represents a LUID and its attributes.

Win32_NamedJobObject Instance class

Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.

Win32_NamedJobObjectActgInfo Instance class

Represents the I/O accounting information for a job object.

Win32_NamedJobObjectLimit Instance class

Represents an association between a job object and the job object limit settings.

Win32_NamedJobObjectLimitSetting Instance class

Represents the limit settings for a job object.

Win32_NamedJobObjectProcess Instance class

Relates a job object and the process contained in the job object.

Win32_NamedJobObjectSecLimit Instance class

Relates a job object and the job object security limit settings.

Win32_NamedJobObjectSecLimitSetting Instance class

Represents the security limit settings for a job object.

Win32_NamedJobObjectStatistics Instance class

Represents an association between a job object and the job object I/O accounting information class.

Win32_SIDandAttributes Instance class

Represents a security identifier (SID) and its attributes.

Win32_TokenGroups Event class

Represents information about the group SIDs in an access token.

Win32_TokenPrivileges Event class

Represents information about a set of privileges for an access token.

 

Memory and Page Files

The Memory and Page files subcategory groups classes that represent page file configuration settings.

Class Description
Win32_LogicalMemoryConfiguration Instance class

This class is obsolete and has been replaced by the Win32_OperatingSystem class.

Win32_PageFile Instance class

Represents the file used for handling virtual memory file swapping on a Windows system.

Win32_PageFileElementSetting Association class

Relates the initial settings of a page file and the state of those settings during normal use.

Win32_PageFileSetting Instance class

Represents the settings of a page file.

Win32_PageFileUsage Instance class

Represents the file used for handling virtual memory file swapping on a computer system running Windows.

Win32_SystemLogicalMemoryConfiguration Association class

This class is obsolete because the properties existing in the Win32_LogicalMemoryConfiguration class are now a part of the Win32_OperatingSystem class.

 

Multimedia Audio or Visual

The class in the Multimedia Audio or Visual subcategory represents properties of the audio or video codec installed on the computer system.

Class Description
Win32_CodecFile Instance class

Represents the audio or video codec installed on the computer system.

 

Networking

The Networking subcategory groups classes that represent network connections, network clients, and network connection settings such as the protocol used.

Class Description
Win32_ActiveRoute Association class

Relates the current IP4 route to the persisted IP route table.

Win32_IP4PersistedRouteTable Instance class

Represents persisted IP routes.

Win32_IP4RouteTable Instance class

Represents information that governs the routing of network data packets.

Win32_IP4RouteTableEvent Event class

Represents IP route change events.

Win32_NetworkClient Instance class

Represents a network client on a computer system running Windows.

Win32_NetworkConnection Instance class

Represents an active network connection in a Windows environment.

Win32_NetworkProtocol Instance class

Represents a protocol and its network characteristics on a computer system running Windows.

Win32_NTDomain Instance class

Represents a Windows NT domain.

Win32_PingStatus Instance class

Represents the values returned by the standard ping command.

Win32_ProtocolBinding Association class

Relates a system-level driver, network protocol, and network adapter.

 

Operating System Events

The Operating System Events subcategory groups classes that represent events in the operating system related to processes, threads, and system shutdown.

Class Description
Win32_ComputerShutdownEvent Event class

Represents computer shutdown events.

Win32_ComputerSystemEvent Event class

Represents events related to a computer system.

Win32_DeviceChangeEvent Event class

Represents device change events resulting from the addition, removal, or modification of devices on the computer system.

Win32_ModuleLoadTrace Event class

Indicates that a process has loaded a new module.

Win32_ModuleTrace Event class

Base event for module events.

Win32_ProcessStartTrace Event class

Indicates that a new process has started.

Win32_ProcessStopTrace Event class

Indicates that a process has terminated.

Win32_ProcessTrace Event class

Base event for process events.

Win32_SystemConfigurationChangeEvent Event class

Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).

Win32_SystemTrace Event class

Base class for all system trace events, including module, process, and thread traces.

Win32_ThreadStartTrace Event class

Indicates a new thread has started.

Win32_ThreadStopTrace Event class

Indicates that a thread has stopped.

Win32_ThreadTrace Event class

Base event class for thread events.

Win32_VolumeChangeEvent Event class

Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

 

Operating System Settings

The Operating System Settings subcategory groups classes that represent the Operating System and its settings.

Class Description
Win32_BootConfiguration Instance class

Represents the boot configuration of a computer system running Windows.

Win32_ComputerSystem Instance class

Represents a computer system operating in a Windows environment.

Win32_ComputerSystemProcessor Association class

Relates a computer system and a processor running on that system.

Win32_ComputerSystemProduct Instance class

Represents a product.

Win32_DependentService Association class

Relates two interdependent base services.

Win32_LoadOrderGroup Instance class

Represents a group of system services that define execution dependencies.

Win32_LoadOrderGroupServiceDependencies Instance class

Represents an association between a base service and a load order group that the service depends on to start running.

Win32_LoadOrderGroupServiceMembers Association class

Relates a load order group and a base service.

Win32_OperatingSystem Instance class

Represents an operating system installed on a computer system running Windows.

Win32_OperatingSystemQFE Association class

Relates an operating system and product updates applied as represented in Win32_QuickFixEngineering.

Win32_OSRecoveryConfiguration Instance class

Represents the types of information that will be gathered from memory when the operating system fails.

Win32_QuickFixEngineering Instance class

Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.

Win32_StartupCommand Instance class

Represents a command that runs automatically when a user logs onto the computer system.

Win32_SystemBootConfiguration Association class

Relates a computer system and its boot configuration.

Win32_SystemDesktop Association class

Relates a computer system and its desktop configuration.

Win32_SystemDevices Association class

Relates a computer system and a logical device installed on that system.

Win32_SystemLoadOrderGroups Association class

Relates a computer system and a load order group.

Win32_SystemNetworkConnections Association class

Relates a network connection and the computer system on which it resides.

Win32_SystemOperatingSystem Association class

Relates a computer system and its operating system.

Win32_SystemProcesses Association class

Relates a computer system and a process running on that system.

Win32_SystemProgramGroups Association class

Relates a computer system and a logical program group.

Win32_SystemResources Association class

Relates a system resource and the computer system it resides on.

Win32_SystemServices Association class

Relates a computer system and a service program that exists on the system.

Win32_SystemSetting Association class

Relates a computer system and a general setting on that system.

Win32_SystemSystemDriver Association class

Relates a computer system and a system driver running on that computer system.

Win32_SystemTimeZone Association class

Relates a computer system and a time zone.

Win32_SystemUsers Association class

Relates a computer system and a user account on that system.

 

Processes

The Processes subcategory groups classes that represent system processes and threads.

Class Description
Win32_Process Instance class

Represents a sequence of events on a computer system running Windows.

Win32_ProcessStartup Instance class

Represents the startup configuration of a computer system running Windows.

Win32_Thread Instance class

Represents a thread of execution.

 

Registry

The class in the Registry subcategory represents the contents of the Windows registry.

Class Description
Win32_Registry Instance class

Represents the system registry on a computer system running Windows.

 

Scheduler Jobs

The Scheduler Jobs subcategory groups classes that represent scheduled job settings.

Class Description
Win32_CurrentTime Abstract class

Represents an instance in time as component seconds, minutes, day of the week, and so on.

Win32_ScheduledJob Instance class

Represents a job scheduled using the Windows schedule service.

Win32_LocalTime Instance class

Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.

Win32_UTCTime Instance class

Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.

 

Security

The Security subcategory groups classes that represent system security settings.

Class Description
Win32_AccountSID Association class

Relates a security account instance with a security descriptor instance.

Win32_ACE Instance class

Represents an access control entry (ACE).

Win32_LogicalFileAccess Association class

Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).

Win32_LogicalFileAuditing Association class

Relates the security settings of a file or directory one member of its system access control list (SACL).

Win32_LogicalFileGroup Association class

Relates the security settings of a file or directory and its group.

Win32_LogicalFileOwner Association class

Relates the security settings of a file or directory and its owner.

Win32_LogicalFileSecuritySetting Instance class

Represents security settings for a logical file.

Win32_LogicalShareAccess Association class

Relates the security settings of a share and one member of its DACL.

Win32_LogicalShareAuditing Association class

Relates the security settings of a share and one member of its SACL.

Win32_LogicalShareSecuritySetting Instance class

Represents security settings for a logical file.

Win32_PrivilegesStatus Instance class

Represents information about the privileges required to complete an operation.

Win32_SecurityDescriptor Instance class

Represents a structural representation of a SECURITY_DESCRIPTOR.

Win32_SecuritySetting Instance class

Represents security settings for a managed element.

Win32_SecuritySettingAccess Instance class

Represents the rights granted and denied to a trustee for a given object.

Win32_SecuritySettingAuditing Instance class

Represents the auditing for a given trustee on a given object.

Win32_SecuritySettingGroup Association class

Relates the security of an object and its group.

Win32_SecuritySettingOfLogicalFile Instance class

Represents security settings of a file or directory object.

Win32_SecuritySettingOfLogicalShare Instance class

Represents security settings of a shared object.

Win32_SecuritySettingOfObject Association class

Relates an object to its security settings.

Win32_SecuritySettingOwner Association class

Relates the security settings of an object and its owner.

Win32_SID Instance class

Represents an arbitrary SID.

Win32_Trustee Instance class

Represents a trustee.

 

Services

The Services subcategory groups classes that represent services and base services.

Class Description
Win32_BaseService Instance class

Represents executable objects that are installed in a registry database maintained by the Service Control Manager.

Win32_Service Instance class

Represents a service on a computer system running Windows.

 

Shares

The Shares subcategory groups classes that represent details of shared resources, such as printers and folders.

Class Description
Win32_DFSNode Association class

Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).

Win32_DFSNodeTarget Association class

Represents the relationship of a DFS node to one of its targets.

Win32_DFSTarget Association class

Represents the target of a DFS node.

Win32_ServerConnection Instance class

Represents the connections made from a remote computer to a shared resource on the local computer.

Win32_ServerSession Instance class

Represents the sessions that are established with the local computer by users on a remote computer.

Win32_ConnectionShare Association class

Relates a shared resource on the computer and the connection made to the shared resource.

Win32_PrinterShare Association class

Relates a local printer and the share that represents it as it is viewed over a network.

Win32_SessionConnection Association class

Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.

Win32_SessionProcess Association class

Represents an association between a logon session and the processes associated with that session.

Win32_ShareToDirectory Association class

Relates a shared resource on the computer system and the directory to which it is mapped.

Win32_Share Instance class

Represents a shared resource on a computer system running Windows.

 

Start Menu

The Start Menu subcategory groups classes that represent program groups.

Class Description
Win32_LogicalProgramGroup Instance class

Represents a program group in a computer system running Windows.

Win32_LogicalProgramGroupDirectory Association class

Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.

Win32_LogicalProgramGroupItem Instance class

Represents an element contained by a Win32_ProgramGroup instance, that is not itself another Win32_ProgramGroup instance.

Win32_LogicalProgramGroupItemDataFile Association class

Relates the program group items of the Start menu, and the files in which they are stored.

Win32_ProgramGroup Instance class

Deprecated.

Represents a program group in a Windows computer system. This class has been deprecated in favor of the Win32_LogicalProgramGroup class.

Win32_ProgramGroupContents Association class

Relates a program group order and an individual program group or item contained in it.

Win32_ProgramGroupOrItem Instance class

Represents a logical grouping of programs on the user's Start|Programs menu.

 

Storage

The Users subcategory groups classes that represent storage information.

Class Description
Win32_ShadowBy Association class

Represents the association between a shadow copy and the provider that creates the shadow copy.

Win32_ShadowContext Association class

Specifies how a shadow copy is to be created, queried, or deleted.

Win32_ShadowCopy Instance class

Represents a duplicate copy of the original volume at a previous time.

Win32_ShadowDiffVolumeSupport Association class

Represents an association between a shadow copy provider and a storage volume.

Win32_ShadowFor Association class

Represents an association between a shadow copy and the volume for which the shadow copy is created.

Win32_ShadowOn Association class

Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowProvider Association class

Represents a component that creates and represents volume shadow copies.

Win32_ShadowStorage Association class

Represents an association between a shadow copy and where the differential data is written.

Win32_ShadowVolumeSupport Association class

Represents an association between a shadow copy provider with a supported volume.

Win32_Volume Instance class

Represents an area of storage on a hard disk.

Win32_VolumeUserQuota Association class

Represents a volume to the per volume quota settings.

 

Users

The Users subcategory groups classes that represent user account information, such as group membership details.

Class Description
Win32_Account Instance class

Represents information about user accounts and group accounts known to the computer system running Windows.

Win32_Group Instance class

Represents data about a group account.

Win32_GroupInDomain Association class

Identifies the group accounts associated with a Windows NT domain.

Win32_GroupUser Association class

Relates a group and an account that is a member of that group.

Win32_LogonSession Instance class

Describes the logon session or sessions associated with a user logged on to Windows.

Win32_LogonSessionMappedDisk Instance class

Represents the mapped logical disks associated with the session.

Win32_NetworkLoginProfile Instance class

Represents the network login information of a specific user on a computer system running Windows.

Win32_SystemAccount Instance class

Represents a system account.

Win32_UserAccount Instance class

Represents information about a user account on a computer system running Windows.

Win32_UserInDomain Association class

Relates a user account and a Windows NT domain.

 

Windows Event Log

The Windows Event Log subcategory groups classes that represent events, event log entries, event log configuration settings, and so on.

Class Description
Win32_NTEventlogFile Instance class

Represents data stored in a Windows Event log file.

Win32_NTLogEvent Instance class

Represents Windows events.

Win32_NTLogEventComputer Association class

Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.

Win32_NTLogEventLog Association class

Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.

Win32_NTLogEventUser Association class

Relates instances of Win32_NTLogEvent and Win32_UserAccount.

 

Windows Product Activation

Windows Product Activation (WPA) is an antipiracy technology to reduce the casual copying of software.

Class Description
Win32_ComputerSystemWindowsProductActivationSetting Association class

Relates instances of Win32_ComputerSystem and Win32_WindowsProductActivation.

Win32_Proxy Instance class

Contains properties and methods to query and configure an Internet connection related to WPA.

Win32_WindowsProductActivation Instance class

Contains properties and methods related to WPA.

 

Win32 Classes