Operating System Classes

The Operating System category groups classes that represent operating system related objects. They denote the various configurations and settings that define a computing environment. Examples include: the boot configuration, Component Object Model (COM) settings, desktop environment settings, drivers, security settings, user settings, and registry settings.

The Operating System category is grouped into the following subcategories:

COM

The COM subcategory groups classes that represent COM and DCOM settings, classes, and client application settings.

Class Description
Win32_ClassicCOMApplicationClasses Association class
Relates a DCOM application and a COM component grouped under it.
Win32_ClassicCOMClass Instance class
Represents the properties of a COM component.
Win32_ClassicCOMClassSettings Association class
Relates a COM class and the settings used to configure instances of the COM class.
Win32_ClientApplicationSetting Association class
Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.
Win32_COMApplication Instance class
Represents a COM application.
Win32_COMApplicationClasses Association class
Relates a COM component and the COM application where it resides.
Win32_COMApplicationSettings Association class
Relates a DCOM application and its configuration settings.
Win32_COMClass Instance class
Represents the properties of a COM component.
Win32_ComClassAutoEmulator Association class
Relates a COM class and another COM class that it automatically emulates.
Win32_ComClassEmulator Association class
Relates two versions of a COM class.
Win32_ComponentCategory Instance class
Represents a component category.
Win32_COMSetting Instance class
Represents the settings associated with a COM component or COM application.
Win32_DCOMApplication Instance class
Represents the properties of a DCOM application.
Win32_DCOMApplicationAccessAllowedSetting Association class
Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.
Win32_DCOMApplicationLaunchAllowedSetting Association class
Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.
Win32_DCOMApplicationSetting Instance class
Represents the settings of a DCOM application.
Win32_ImplementedCategory Association class
Relates a component category and the COM class using its interfaces.

Desktop

The Desktop subcategory groups classes that represent objects that define a specific desktop configuration.

Class Description
Win32_Desktop Instance class
Represents the common characteristics of a user's desktop.
Win32_Environment Instance class
Represents an environment or system environment setting on a computer system running Windows.
Win32_TimeZone Instance class
Represents the time zone information for a computer system running Windows.
Win32_UserDesktop Association class
Relates a user account and the desktop settings that are specific to it.

Drivers

The Drivers subcategory groups classes that represent virtual device drivers and system drivers for base services.

Class Description
Win32_SystemDriver Instance class
Represents the system driver for a base service.

File System

The File System subcategory groups classes that represent the way a hard disk is logically arranged. This includes the type of file system used, the directory structure, and way the disk is partitioned.

Class Description
Win32_CIMLogicalDeviceCIMDataFile Association class
Relates logical devices and data files, indicating the driver files used by the device.
Win32_Directory Instance class
Represents a directory entry on a computer system running Windows.
Win32_DirectorySpecification Instance class
Represents the directory layout for the product.
Win32_DiskDriveToDiskPartition Association class
Relates a disk drive and a partition existing on it.
Win32_DiskPartition Instance class
Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.
Win32_DiskQuota Association class
Tracks disk space usage for NTFS file system volumes.
Win32_LogicalDisk Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory Association class
Relates a logical disk and its directory structure.
Win32_LogicalDiskToPartition Association class
Relates a logical disk drive and the disk partition it resides on.
Win32_MappedLogicalDisk Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_OperatingSystemAutochkSetting Association class
Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.
Win32_QuotaSetting Instance class
Contains setting information for disk quotas on a volume.
Win32_ShortcutFile Instance class
Represents files that are shortcuts to other files, directories, and commands.
Win32_SubDirectory Association class
Relates a directory (folder) and one of its subdirectories (subfolders).
Win32_SystemPartitions Association class
Relates a computer system and a disk partition on that system.
Win32_Volume Instance class
Represents an area of storage on a hard disk.
Win32_VolumeQuota Association class
Relates a volume to the per volume quota settings.
Win32_VolumeQuotaSetting Association class
Relates disk quota settings with a specific disk volume.
Win32_VolumeUserQuota Association class
Relates per user quotas to quota-enabled volumes.

Job Objects

The Job Objects subcategory groups classes that represent classes that provide the means of instrumenting named job objects. An unnamed job object cannot be instrumented.

Class Description
Win32_CollectionStatistics Association class
Relates a managed system element collection and the class representing statistical information about the collection.
Win32_LUID Instance class
Represents a locally unique identifier (LUID)
Win32_LUIDandAttributes Instance class
Represents a LUID and its attributes.
Win32_NamedJobObject Instance class
Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.
Win32_NamedJobObjectActgInfo Instance class
Represents the I/O accounting information for a job object.
Win32_NamedJobObjectLimit Instance class
Represents an association between a job object and the job object limit settings.
Win32_NamedJobObjectLimitSetting Instance class
Represents the limit settings for a job object.
Win32_NamedJobObjectProcess Instance class
Relates a job object and the process contained in the job object.
Win32_NamedJobObjectSecLimit Instance class
Relates a job object and the job object security limit settings.
Win32_NamedJobObjectSecLimitSetting Instance class
Represents the security limit settings for a job object.
Win32_NamedJobObjectStatistics Instance class
Represents an association between a job object and the job object I/O accounting information class.
Win32_SIDandAttributes Instance class
Represents a security identifier (SID) and its attributes.
Win32_TokenGroups Event class
Represents information about the group SIDs in an access token.
Win32_TokenPrivileges Event class
Represents information about a set of privileges for an access token.

Memory and Page Files

The Memory and Page files subcategory groups classes that represent page file configuration settings.

Class Description
Win32_PageFile Instance class
Represents the file used for handling virtual memory file swapping on a Windows system.
Win32_PageFileElementSetting Association class
Relates the initial settings of a page file and the state of those settings during normal use.
Win32_PageFileSetting Instance class
Represents the settings of a page file.
Win32_PageFileUsage Instance class
Represents the file used for handling virtual memory file swapping on a computer system running Windows.

Multimedia Audio or Visual

The class in the Multimedia Audio or Visual subcategory represents properties of the audio or video codec installed on the computer system.

Class Description
Win32_CodecFile Instance class
Represents the audio or video codec installed on the computer system.

Networking

The Networking subcategory groups classes that represent network connections, network clients, and network connection settings such as the protocol used.

Class Description
Win32_ActiveRoute Association class
Relates the current IP4 route to the persisted IP route table.
Win32_IP4PersistedRouteTable Instance class
Represents persisted IP routes.
Win32_IP4RouteTable Instance class
Represents information that governs the routing of network data packets.
Win32_IP4RouteTableEvent Event class
Represents IP route change events.
Win32_NetworkClient Instance class
Represents a network client on a computer system running Windows.
Win32_NetworkConnection Instance class
Represents an active network connection in a Windows environment.
Win32_NetworkProtocol Instance class
Represents a protocol and its network characteristics on a computer system running Windows.
Win32_NTDomain Instance class
Represents a Windows NT domain.
Win32_PingStatus Instance class
Represents the values returned by the standard ping command.
Win32_ProtocolBinding Association class
Relates a system-level driver, network protocol, and network adapter.

Operating System Events

The Operating System Events subcategory groups classes that represent events in the operating system related to processes, threads, and system shutdown.

Class Description
Win32_ComputerShutdownEvent Event class
Represents computer shutdown events.
Win32_ComputerSystemEvent Event class
Represents events related to a computer system.
Win32_DeviceChangeEvent Event class
Represents device change events resulting from the addition, removal, or modification of devices on the computer system.
Win32_ModuleLoadTrace Event class
Indicates that a process has loaded a new module.
Win32_ModuleTrace Event class
Base event for module events.
Win32_ProcessStartTrace Event class
Indicates that a new process has started.
Win32_ProcessStopTrace Event class
Indicates that a process has terminated.
Win32_ProcessTrace Event class
Base event for process events.
Win32_SystemConfigurationChangeEvent Event class
Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).
Win32_SystemTrace Event class
Base class for all system trace events, including module, process, and thread traces.
Win32_ThreadStartTrace Event class
Indicates a new thread has started.
Win32_ThreadStopTrace Event class
Indicates that a thread has stopped.
Win32_ThreadTrace Event class
Base event class for thread events.
Win32_VolumeChangeEvent Event class
Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.

Operating System Settings

The Operating System Settings subcategory groups classes that represent the Operating System and its settings.

Class Description
Win32_BootConfiguration Instance class
Represents the boot configuration of a computer system running Windows.
Win32_ComputerSystem Instance class
Represents a computer system operating in a Windows environment.
Win32_ComputerSystemProcessor Association class
Relates a computer system and a processor running on that system.
Win32_ComputerSystemProduct Instance class
Represents a product.
Win32_DependentService Association class
Relates two interdependent base services.
Win32_LoadOrderGroup Instance class
Represents a group of system services that define execution dependencies.
Win32_LoadOrderGroupServiceDependencies Instance class
Represents an association between a base service and a load order group that the service depends on to start running.
Win32_LoadOrderGroupServiceMembers Association class
Relates a load order group and a base service.
Win32_OperatingSystem Instance class
Represents an operating system installed on a computer system running Windows.
Win32_OperatingSystemQFE Association class
Relates an operating system and product updates applied as represented in Win32_QuickFixEngineering.
Win32_OSRecoveryConfiguration Instance class
Represents the types of information that will be gathered from memory when the operating system fails.
Win32_QuickFixEngineering Instance class
Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
Win32_StartupCommand Instance class
Represents a command that runs automatically when a user logs onto the computer system.
Win32_SystemBootConfiguration Association class
Relates a computer system and its boot configuration.
Win32_SystemDesktop Association class
Relates a computer system and its desktop configuration.
Win32_SystemDevices Association class
Relates a computer system and a logical device installed on that system.
Win32_SystemLoadOrderGroups Association class
Relates a computer system and a load order group.
Win32_SystemNetworkConnections Association class
Relates a network connection and the computer system on which it resides.
Win32_SystemOperatingSystem Association class
Relates a computer system and its operating system.
Win32_SystemProcesses Association class
Relates a computer system and a process running on that system.
Win32_SystemProgramGroups Association class
Relates a computer system and a logical program group.
Win32_SystemResources Association class
Relates a system resource and the computer system it resides on.
Win32_SystemServices Association class
Relates a computer system and a service program that exists on the system.
Win32_SystemSetting Association class
Relates a computer system and a general setting on that system.
Win32_SystemSystemDriver Association class
Relates a computer system and a system driver running on that computer system.
Win32_SystemTimeZone Association class
Relates a computer system and a time zone.
Win32_SystemUsers Association class
Relates a computer system and a user account on that system.

Processes

The Processes subcategory groups classes that represent system processes and threads.

Class Description
Win32_Process Instance class
Represents a sequence of events on a computer system running Windows.
Win32_ProcessStartup Instance class
Represents the startup configuration of a computer system running Windows.
Win32_Thread Instance class
Represents a thread of execution.

Registry

The class in the Registry subcategory represents the contents of the Windows registry.

Class Description
Win32_Registry Instance class
Represents the system registry on a computer system running Windows.

Scheduler Jobs

The Scheduler Jobs subcategory groups classes that represent scheduled job settings.

Class Description
Win32_CurrentTime Abstract class
Represents an instance in time as component seconds, minutes, day of the week, and so on.
Win32_ScheduledJob Instance class
Represents a job scheduled using the Windows schedule service.
Win32_LocalTime Instance class
Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.
Win32_UTCTime Instance class
Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24 hour clock.

Security

The Security subcategory groups classes that represent system security settings.

Class Description
Win32_AccountSID Association class
Relates a security account instance with a security descriptor instance.
Win32_ACE Instance class
Represents an access control entry (ACE).
Win32_LogicalFileAccess Association class
Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).
Win32_LogicalFileAuditing Association class
Relates the security settings of a file or directory one member of its system access control list (SACL).
Win32_LogicalFileGroup Association class
Relates the security settings of a file or directory and its group.
Win32_LogicalFileOwner Association class
Relates the security settings of a file or directory and its owner.
Win32_LogicalFileSecuritySetting Instance class
Represents security settings for a logical file.
Win32_LogicalShareAccess Association class
Relates the security settings of a share and one member of its DACL.
Win32_LogicalShareAuditing Association class
Relates the security settings of a share and one member of its SACL.
Win32_LogicalShareSecuritySetting Instance class
Represents security settings for a logical file.
Win32_PrivilegesStatus Instance class
Represents information about the privileges required to complete an operation.
Win32_SecurityDescriptor Instance class
Represents a structural representation of a SECURITY_DESCRIPTOR.
Win32_SecuritySetting Instance class
Represents security settings for a managed element.
Win32_SecuritySettingAccess Instance class
Represents the rights granted and denied to a trustee for a given object.
Win32_SecuritySettingAuditing Instance class
Represents the auditing for a given trustee on a given object.
Win32_SecuritySettingGroup Association class
Relates the security of an object and its group.
Win32_SecuritySettingOfLogicalFile Instance class
Represents security settings of a file or directory object.
Win32_SecuritySettingOfLogicalShare Instance class
Represents security settings of a shared object.
Win32_SecuritySettingOfObject Association class
Relates an object to its security settings.
Win32_SecuritySettingOwner Association class
Relates the security settings of an object and its owner.
Win32_SID Instance class
Represents an arbitrary SID.
Win32_Trustee Instance class
Represents a trustee.

Services

The Services subcategory groups classes that represent services and base services.

Class Description
Win32_BaseService Instance class
Represents executable objects that are installed in a registry database maintained by the Service Control Manager.
Win32_Service Instance class
Represents a service on a computer system running Windows.

Shares

The Shares subcategory groups classes that represent details of shared resources, such as printers and folders.

Class Description
Win32_DFSNode Association class
Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).
Win32_DFSNodeTarget Association class
Represents the relationship of a DFS node to one of its targets.
Win32_DFSTarget Association class
Represents the target of a DFS node.
Win32_ServerConnection Instance class
Represents the connections made from a remote computer to a shared resource on the local computer.
Win32_ServerSession Instance class
Represents the sessions that are established with the local computer by users on a remote computer.
Win32_ConnectionShare Association class
Relates a shared resource on the computer and the connection made to the shared resource.
Win32_PrinterShare Association class
Relates a local printer and the share that represents it as it is viewed over a network.
Win32_SessionConnection Association class
Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.
Win32_SessionProcess Association class
Represents an association between a logon session and the processes associated with that session.
Win32_ShareToDirectory Association class
Relates a shared resource on the computer system and the directory to which it is mapped.
Win32_Share Instance class
Represents a shared resource on a computer system running Windows.

Start Menu

The Start Menu subcategory groups classes that represent program groups.

Class Description
Win32_LogicalProgramGroup Instance class
Represents a program group in a computer system running Windows.
Win32_LogicalProgramGroupDirectory Association class
Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.
Win32_LogicalProgramGroupItem Instance class
Represents an element contained by a Win32_ProgramGroup instance, that is not itself another Win32_ProgramGroup instance.
Win32_LogicalProgramGroupItemDataFile Association class
Relates the program group items of the Start menu, and the files in which they are stored.
Win32_ProgramGroupContents Association class
Relates a program group order and an individual program group or item contained in it.
Win32_ProgramGroupOrItem Instance class
Represents a logical grouping of programs on the user's Start|Programs menu.

Storage

The Users subcategory groups classes that represent storage information.

Class Description
Win32_ShadowBy Association class
Represents the association between a shadow copy and the provider that creates the shadow copy.
Win32_ShadowContext Association class
Specifies how a shadow copy is to be created, queried, or deleted.
Win32_ShadowCopy Instance class
Represents a duplicate copy of the original volume at a previous time.
Win32_ShadowDiffVolumeSupport Association class
Represents an association between a shadow copy provider and a storage volume.
Win32_ShadowFor Association class
Represents an association between a shadow copy and the volume for which the shadow copy is created.
Win32_ShadowOn Association class
Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowProvider Association class
Represents a component that creates and represents volume shadow copies.
Win32_ShadowStorage Association class
Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowVolumeSupport Association class
Represents an association between a shadow copy provider with a supported volume.
Win32_Volume Instance class
Represents an area of storage on a hard disk.
Win32_VolumeUserQuota Association class
Represents a volume to the per volume quota settings.

Users

The Users subcategory groups classes that represent user account information, such as group membership details.

Class Description
Win32_Account Instance class
Represents information about user accounts and group accounts known to the computer system running Windows.
Win32_Group Instance class
Represents data about a group account.
Win32_GroupInDomain Association class
Identifies the group accounts associated with a Windows NT domain.
Win32_GroupUser Association class
Relates a group and an account that is a member of that group.
Win32_LogonSession Instance class
Describes the logon session or sessions associated with a user logged on to Windows.
Win32_LogonSessionMappedDisk Instance class
Represents the mapped logical disks associated with the session.
Win32_NetworkLoginProfile Instance class
Represents the network login information of a specific user on a computer system running Windows.
Win32_SystemAccount Instance class
Represents a system account.
Win32_UserAccount Instance class
Represents information about a user account on a computer system running Windows.
Win32_UserInDomain Association class
Relates a user account and a Windows NT domain.

Windows Event Log

The Windows Event Log subcategory groups classes that represent events, event log entries, event log configuration settings, and so on.

Class Description
Win32_NTEventlogFile Instance class
Represents data stored in a Windows Event log file.
Win32_NTLogEvent Instance class
Represents Windows events.
Win32_NTLogEventComputer Association class
Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.
Win32_NTLogEventLog Association class
Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.
Win32_NTLogEventUser Association class
Relates instances of Win32_NTLogEvent and Win32_UserAccount.

Windows Product Activation

Windows Product Activation (WPA) is an antipiracy technology to reduce the casual copying of software.

Class Description
Win32_ComputerSystemWindowsProductActivationSetting Association class
Relates instances of Win32_ComputerSystem and Win32_WindowsProductActivation.
Win32_Proxy Instance class
Contains properties and methods to query and configure an Internet connection related to WPA.
Win32_WindowsProductActivation Instance class
Contains properties and methods related to WPA.

Win32 Classes