Securing WMI Events

WMI events are delivered by the event provider to a temporary or permanent consumer. The WMI event system uses the comparison of security descriptors on events and user account SIDs to control event access.

Events are delivered in the form of an instance of an event class usually, but not necessarily, derived ultimately from __Event. WMI supplies several general event classes in the WMI System Classes, such as __InstanceModificationEvent. Providers may also supply their own event classes. For example, the System Registry Provider has event classes that report the change of a registry key or value, such as RegistryKeyChangeEvent.

The following topics supply information about securing delivery of events for providers and receiving events securely for client scripts and applications:

• Providing Events Securely
• Receiving Events Securely

Related topics

Maintaining WMI Security