WMI/MI/OMI Providers

Windows Management Infrastructure (WMI), Management Instrumentation (MI) and Open Management Infrastructure (OMI) all use Management Object Format (MOF) files to describe the information made available through their respective providers.

Active Directory

The Active Directory provider, also known as the Directory Services (DS) provider, maps Active Directory objects to WMI. By accessing the Lightweight Directory Access Protocol (LDAP) namespace in WMI, you can reference or make an object an alias in the Active Directory.

Application Inventory

The WMI classes for Application Inventory enable discovery of the installed Win32 applications and Windows store applications on a Windows system.

Application Proxy

Application Proxy WMI Provider enables developers to access the Web Application Proxy service so administrators can publish applications for external access. Web Application Proxy is a reverse proxy for Active Directory Federation Services (AD FS).

BitLocker Drive Encryption (BDE)

Provides configuration and management for an area of storage on a hard disk drive, represented by an instance of Win32_EncryptableVolume, that can be protected by using encryption.


The Background Intelligent Transfer Service (BITS) Compact Server with BITS Remote Management allows authenticated administrators or controller applications to create, modify and manage BITS transfer jobs remotely without using the Internet Information Services (IIS) service.


Supplies access to the BizTalk administration objects represented by WMI classes.

Boot Configuration Data

The Boot Configuration Data (BCD) provider provides a store that is used to describe boot applications and boot application settings.

Boot Event Collector

The Boot Event Collector WMI provider provides access to connection and configuration information for the Setup and Boot Event Collection feature on Windows Server.

CIMWin32, Win32, Power Management Events

The CIMWin32 providers support the classes implemented in CimWin32.dll, and consist of the core CIM classes, the Win32 implementation of those classes, and power management events.


The CIMWin32a provider extends the classes available in the CIMWin32.


The DcbQosCim provider supports classes that describe Network QOS setting data, control setting data, and traffic class setting data.

Distributed File System (DFS)

The DFS provider supplies scriptable DFS functions through WMI.

Distributed File System Replication (DFSR)

Creates tools for configuring and monitoring the Distributed File System (DFS) service. For more information, see DFSR WMI Classes.


The Dfsncimprov provider supports classes that implement DFS namespace access.


The DhcpServerPSProvider provider supports classes that interact with a dynamic host configuration protocol (DHCP) server.

Disk Quota

The Windows Disk Quota provider allows administrators to control the amount of data that each user stores on an NTFS file system.

Distributed Transaction Coordinator (DTC)

The DTC provider enables management of the DTC.


Enables administrators and programmers to configure Domain Name System (DNS) resource records (RRs) and DNS Servers using WMI.

Dnsclientcim Provider Classes

The Dnsclientcim provider supports classes that interact with a Domain Name System (DNS) client.


The DnsClientPSProvider provider supports WMI classes that interact with a DNS client.


The DnsServerPSProvider provider supports WMI classes that interact with a DNS server.

Event Log

The Event Log provider supplies access to data from the event log service, and notification of events.

Event Tracing Management

The Event Tracing Management provider provides access to Event Tracing for Windows (ETW) autologger session configurations and trace events.

Failover Cluster-Aware Updating

The Failover Cluster-Aware Updating (CAU) provider supports coordination with and management of CAU.

Failover Clustering Hyper-V

The Failover Clustering Hyper-V provider provides management and reporting of Hyper-V in a clustering environment.

Failover Clustering Storage QoS

The Failover Clustering Storage Quality of Service (QoS) provider provides management and reporting of the clustering storage QoS policies.

Failover Cluster V1 Provider

The Failover Cluster V1 provider provides management of a failover cluster.

Failover Cluster V1 Extensions

The Failover Cluster Extensions provider provides additional management of a failover cluster.

Gateway Health Monitor

The Gateway Health Monitor provider manages gateway health monitoring events and information.

Group Policy API

The Group Policy provider enables policy-based administration using Microsoft Active Directory (AD) directory services.

Host Guardian Service

The Host Guardian Service provider provides management of the Host Guardian Service for shielded VMs.


The Hyper-V provider allows you to manage and retrieve information about virtual machines.

Hyper-V (V2)

The Hyper-V (V2) provider extends the Hyper-V provider.

Internet Information Services (IIS)

Exposes programming interfaces that can be used to query and configure the IIS metabase.

Internet Protocol Address Management (IPAM) Server

The IPAM Server Provider enables developers to manage IPAM through WMI.

IP Route Provider

The preinstalled IP Route provider supplies IPV4 network routing information, including (but not limited to) the information available through the route print command.

Intelligent Platform Management Interface (IPMI)

Supplies IPMI data from Baseboard Management Controller (BMC) operations.

iSCSI Target Server

The iSCSI Target Server provider supports a WMI interface for managing the Microsoft iSCSI Target Server, such as creating virtual disks, and for presenting them to the client.

Job Object

The Job Object provider supports access to data about named kernel job objects.

Kernel Trace

The preinstalled Kernel Trace event provider allows you to see kernel trace events on Process creation, Process termination, Thread creation, Thread termination and module load.

Live Communications Server 2003

Provides classes that create, register, configure, manage custom Session Initiation Protocol (SIP) applications with the Live Communications Server 2003.

Management Tools Registry

The Management Tools Registry provider provides remote access to the registry.

Management Tools Task Manager

The Management Tools Task Manager provider provides access and management of the Task Manager data.

MDM Application

The Mobile Device Management (MDM) application provider manages applications on devices that are subscribed to the MDM service.

MDM Bridge

The MDM Bridge provider enables MDM management of a network bridge.

MDM Settings

The MDM Settings Provider enables management of settings on devices enrolled with a MDM service.


The MSFT_PCSVDevice provider exposes a class that defines a view class for a physical computer system.


The MsNetImPlatform provider section provides reference information for MsNetImPlatform provider classes implemented in NdisIMPlatCim.dll.


The NetAdapterCim provider supports classes that access network adapters.


This section provides reference information for NetDaCim Provider classes.


Provides reference information for NetNcCim provider classes.


The NetPeerDist provider supports classes that interact with the Branch Cache infrastructure.


The NetQosCim provider supplies data for network quality of service (QoS) and QoS setting data.


This section provides reference information for NetSwitchTeam provider classes declared in NetSwitchTeam.mof and implemented in NetSwitchTeamCim.dll.


The NetTCPIP provider supports classes that interact with TCPIP connections.


This section provides reference information for NetTtCim provider classes defined in NetTtCim.mof and implemented in NetTtCim.dll.


The NetWNV provider supports classes that interact with net virtualization technologies.

Network Access Protection

The Network Access Protection provider exposes a platform for protected access to private networks.

Network Load Balancing

The Network Load Balancing (NLB) Provider enables management of a NLB cluster.

NetworkController Server

The provider enables management of a network controller server.


The provider for NFS allows you to create tools and scripts for configuring and monitoring the Windows Network File System.


The Ping provider supplies access to the status information provided by the standard ping command.


Provides extensions to group policy, and permits refinements in the application of policy.

Power Meter

The Power Meter provider supports the Power Metering and Budgeting (PMB) interface. These classes are the primary interface for the query of Power Meter Interface (PMI) information from underlying power meters on the system.

Power Policy

The Power Policy provider provides classes the ability to remotely manage all the power policy infrastructure.


The RAMgmtPSProvider provider provides classes to manage Remote Access.


The RAServerPSProvider provider provides classes to manage the Remote Access Server.


The ReliabilityMetricsProvider provider exposes system and Windows Event Log reliability metrics.

Remote Desktop Services

Enables consistent server administration in a Remote Desktop Services environment.

Reporting Services

Defines classes that allow you to write scripts and code to modify the settings of the report server and the Report Manager.

Resultant Set of Policy (RSoP)

Supplies methods to plan and debug policy settings in a what-if situation. These methods allow administrators to determine easily the combination of policy settings that apply to, or will apply to, a user or computer. This is known as the Resultant Set of Policy (RSoP). For more information, see About the RSoP WMI Method Provider and RSoP WMI Classes.


Retrieves or changes security settings that control ownership, auditing, and access rights to files, directories, and shares.


The ServerManager.DeploymentProvider exposes deployment functionality.


Manages network sessions and connections.

Shadow Copy

Supplies management functions for the Shadow Copies of the Shared Folders feature.

Shielded VM Provisioning

The Shielded VM Provisioning provider enables a fabric controller to start the secure provisioning of a shielded VM on a Hyper-V host.

Shielded VM Provisioning Service

The provider enables provisioning of a shielded virtual machine.

SMB Management

The SMB Management API provides classes and methods to manage shares and share access.


Maps Simple Network Management Protocol (SNMP) objects that are defined in Management Information Base (MIB) schema objects to classes. For more information, see Setting up the WMI SNMP Environment.

Software Inventory Logging

The Software Inventory Logging provider collects licensing data about software installed on a Windows Server, and provides remote access to the data so it can be aggregated easily by a datacenter.

Software Licensing for Windows Vista

Software Licensing Classes used for Windows Vista.

Software License

The Software Licensing provider retrieves software licensing data.

Storage Volume

The Storage Volume provider supplies volume management functions.

Storage Replica

The provider enables management of a storage replica.

System Registry

The System Registry provider enables management applications to retrieve and modify data in the system registry, and receive notifications when changes occur.

System Restore

Supplies classes that configure and use System Restore functionality. For more information, see Configuring System Restore and the System Restore WMI Classes.

Trusted Platform Module

Provides access to data about a security device, represented by an instance of Win32_TPM, that is the root of trust for a Microsoft Windows trusted platform computer system.


The Trustmon provider is an instance provider that creates classes with information about the trust relationships between domains.

User Access Logging

User Access Logging (UAL) is a common framework for Windows Server roles to report their respective consumption metrics.


The UserProfileProvider provider exposes classes that provide information about a user profile on a Windows system, as well as the health status of a redirected user folder.

User State Management

The User State Management provider exposes a management and reporting API for enterprise scenarios.


Creates new instances and methods based on instances of other classes. Two versions of the View provider are available on 64-bit platforms.


The VPNClientPSProvider provider exposes a platform for automating connectivity to a virtual private network client.


Provides access to the classes, instances, methods, and events of hardware drivers that conform to the Windows Driver Model (WDM).


The WFasCim provider exposes network security and filtering features.


The WhqlProvider provider exposes digital signature information about drivers.


The Win32ClockProvider provider exposes the current, local, and UTC-based timestamps on a computer system.

Windows Data Access Components (WDAC)

Provides management of WDAC.

Windows Defender

The Windows Defender provider exposes Windows Defender security features.

Windows Installer

The Windows Installer provider, also known as the MSI provider allows applications to access information collected from Windows Installer compliant applications.

Windows Product Activation

The Windows Product Activation (WPA) provider is an anti-piracy technology aimed at reducing the casual copying of software.

Windows Server Manager

The provider enables access to and management of the configuration controlled by the Server Manager application.

Windows Server Storage Management (MsftStrgMan)

The MsftStrgMan provider provides management for storage systems on Windows Server products.

Windows Storage Management (StrgMgmt)

The StrgMgmt provider can be used to manage a wide range of storage configurations, from tablets to external storage arrays on servers.

Windows System Assessment Tool

The Windows System Assessment Tool (WinSAT) exposes a number of classes that assesses the performance characteristics and capabilities of a computer.

WMI Core

The WMI Core provider defines classes that compose the core functionality of WMI.


The Msft_ProviderSubSystem provider supports providers.


The Win32_Perf abstract class is the base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData. It defines the required timestamp and frequency properties used in the CounterType algorithms for the performance counter classes.


An abstract base class for the pre-installed, calculated data classes.


The performance counter class Win32_PerfRawData is the abstract base class for all concrete raw performance counter classes. To appear in System Monitor, performance counter classes must be added to the "Root\CIMv2" namespace and derived from Win32_PerfRawData.


Creates the WMI Performance Counter Classes. Data is dynamically supplied to these performance classes by the WMIPerfInst provider.


Supplies raw and formatted performance counter data dynamically from Performance Counter Class definitions.

Work Folders

Work Folders is used to synchronize files with multiple PCs and mobile devices.