DeviceStatus 云解决方案提供商DeviceStatus CSP

企业使用 DeviceStatus 配置服务提供程序来跟踪设备清单,并查询这些设备的合规性状态及其企业策略。The DeviceStatus configuration service provider is used by the enterprise to keep track of device inventory and query the state of compliance of these devices with their enterprise policies.

下面以树格式显示 DeviceStatus 配置服务提供程序。The following shows the DeviceStatus configuration service provider in tree format.

./Vendor/MSFT
DeviceStatus
----SecureBootState
----CellularIdentities
--------IMEI
------------IMSI
------------ICCID
------------PhoneNumber
------------CommercializationOperator
------------RoamingStatus
------------RoamingCompliance
----NetworkIdentifiers
--------MacAddress
------------IPAddressV4
------------IPAddressV6
------------IsConnected
------------Type
----Compliance
--------EncryptionCompliance
----TPM
--------SpecificationVersion
----OS
--------Edition
--------Mode
----Antivirus
--------SignatureStatus
--------Status
----Antispyware
--------SignatureStatus
--------Status
----Firewall
--------Status
----UAC
--------Status
----Battery
--------Status
--------EstimatedChargeRemaining
--------EstimatedRuntime
----DomainName
----DeviceGuard
--------VirtualizationBasedSecurityHwReq
--------VirtualizationBasedSecurityStatus
--------LsaCfgCredGuardStatus

DeviceStatusDeviceStatus
DeviceStatus 配置服务提供程序的根节点。The root node for the DeviceStatus configuration service provider.

DeviceStatus/SecureBootStateDeviceStatus/SecureBootState
指示是否启用安全启动。Indicates whether secure boot is enabled. 该值为下列值之一:The value is one of the following:

  • 0 - 不支持0 - Not supported
  • 1 - 已启用1 - Enabled
  • 2 - 已禁用2 - Disabled

支持的操作为 Get。Supported operation is Get.

DeviceStatus/CellularIdentitiesDeviceStatus/CellularIdentities
必需。Required. SIM 卡上查询的节点。Node for queries on the SIM cards.

备注

支持多个 SIM。Multiple SIMs are supported.

DeviceStatus/CellularIdentities/ IMEIDeviceStatus/CellularIdentities/IMEI
唯一国际工作站设备标识 (IMEI) 移动设备编号。The unique International Mobile Station Equipment Identity (IMEI) number of the mobile device. 设备上每张 SIM 卡都有 IMEI。An IMEI is present for each SIM card on the device.

DeviceStatus/CellularIdentities/IMEI/IMSIDeviceStatus/CellularIdentities/IMEI/IMSI
国际移动订阅者标识 (IMEI) IMSI 标识。The International Mobile Subscriber Identity (IMSI) associated with the IMEI number.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/CellularIdentities/IMEI/ICCIDDeviceStatus/CellularIdentities/IMEI/ICCID
INTEGRATED Circuit Card ID (ICCID) 与特定 IMEI 号码相关联的 SIM 卡。The Integrated Circuit Card ID (ICCID) of the SIM card associated with the specific IMEI number.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/CellularIdentities/IMEI/PhoneNumberDeviceStatus/CellularIdentities/IMEI/PhoneNumber
与特定 IMEI 号码相关联的电话号码。Phone number associated with the specific IMEI number.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/CellularIdentities/IMEI/CommercializationOperatorDeviceStatus/CellularIdentities/IMEI/CommercializationOperator
与特定 IMEI 号码关联的移动服务提供商或移动运营商。The mobile service provider or mobile operator associated with the specific IMEI number.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/CellularIdentities/IMEI/RoamingStatusDeviceStatus/CellularIdentities/IMEI/RoamingStatus
指示是否漫游与特定 IMEI 号码相关联的 SIM 卡。Indicates whether the SIM card associated with the specific IMEI number is roaming.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/CellularIdentities/IMEI/RoamingComplianceDeviceStatus/CellularIdentities/IMEI/RoamingCompliance
指示遵守强制企业漫游策略的布尔值。Boolean value that indicates compliance with the enforced enterprise roaming policy.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/NetworkIdentifiersDeviceStatus/NetworkIdentifiers
有关网络和设备属性的查询的节点。Node for queries on network and device properties.

DeviceStatus/NetworkIdentifiers/ MacAddressDeviceStatus/NetworkIdentifiers/MacAddress
无线网卡的 MAC 地址。MAC address of the wireless network card. 设备上每个网卡都有 MAC 地址。A MAC address is present for each network card on the device.

DeviceStatus/NetworkIdentifiers/MacAddress/IPAddressV4DeviceStatus/NetworkIdentifiers/MacAddress/IPAddressV4
与 MAC 地址关联的网卡的 IPv4 地址。IPv4 address of the network card associated with the MAC address.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/NetworkIdentifiers/MacAddress/IPAddressV6DeviceStatus/NetworkIdentifiers/MacAddress/IPAddressV6
与 MAC 地址关联的网卡的 IPv6 地址。IPv6 address of the network card associated with the MAC address.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/NetworkIdentifiers/MacAddress/IsConnectedDeviceStatus/NetworkIdentifiers/MacAddress/IsConnected
指示与 MAC 地址关联的网卡是否具有活动的网络连接的布尔值。Boolean value that indicates whether the network card associated with the MAC address has an active network connection.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/NetworkIdentifiers/MacAddress/TypeDeviceStatus/NetworkIdentifiers/MacAddress/Type
网络连接的类型。Type of network connection. 该值为下列值之一:The value is one of the following:

  • 2 - WLAN (或其他无线接口) 2 - WLAN (or other Wireless interface)
  • 1 - LAN (或其他有线接口) 1 - LAN (or other Wired interface)
  • 0 - 未知0 - Unknown

支持的操作为 Get。Supported operation is Get.

DeviceStatus/ComplianceDeviceStatus/Compliance
合规性查询的节点。Node for the compliance query.

DeviceStatus/Compliance/EncryptionComplianceDeviceStatus/Compliance/EncryptionCompliance
Boolean 值,指示 OS 和系统驱动器 (企业) 策略。Boolean value that indicates compliance with the enterprise encryption policy for OS (system) drives. 该值为下列值之一:The value is one of the following:

  • 0 - 未加密0 - not encrypted
  • 1 - 加密1 - encrypted

支持的操作为 Get。Supported operation is Get.

DeviceStatus/TPMDeviceStatus/TPM
在 Windows 版本 1607 中添加。Added in Windows, version 1607. TPM 查询的节点。Node for the TPM query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/TPM/SpecificationVersionDeviceStatus/TPM/SpecificationVersion
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定规范版本的字符串。String that specifies the specification version.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/OSDeviceStatus/OS
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 操作系统查询的节点。Node for the OS query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/OS/EditionDeviceStatus/OS/Edition
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定操作系统版本的字符串。String that specifies the OS edition.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/OS/ModeDeviceStatus/OS/Mode
在 Windows 版本 1803 中添加。Added in Windows, version 1803. 指定设备模式的只读节点。Read only node that specifies the device mode.

有效值:Valid values:

  • 0 - 设备采用标准配置0 - the device is in standard configuration
  • 1 - 设备位于 S 模式配置中1 - the device is in S mode configuration

支持的操作为 Get。Supported operation is Get.

DeviceStatus/AntivirusDeviceStatus/Antivirus
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 防病毒查询的节点。Node for the antivirus query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/Antivirus/SignatureStatusDeviceStatus/Antivirus/SignatureStatus
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定防病毒签名状态的整数。Integer that specifies the status of the antivirus signature.

有效值:Valid values:

  • 0 - 安全软件报告这不是最新版本。0 - The security software reports that it is not the most recent version.
  • 1 (默认) - 安全软件报告它是最新版本。1 (default) - The security software reports that it is the most recent version.
  • 2 – 不适用。2 – Not applicable. 对于没有防病毒软件的设备(如没有防病毒 (API,将返回此方法。) This is returned for devices like the phone that do not have an antivirus (where the API doesn’t exist.)

支持的操作为 Get。Supported operation is Get.

如果多个防病毒提供程序处于活动状态,则此节点返回:If more than one antivirus provider is active, this node returns:

  • 1 – 如果每个活动的防病毒提供程序都有有效的签名状态。1 – If every active antivirus provider has a valid signature status.
  • 0 – 如果任何活动的防病毒提供程序的签名状态无效。0 – If any of the active antivirus providers has an invalid signature status.

当没有防病毒提供程序处于活动状态时,此节点也会返回 0。This node also returns 0 when no antivirus provider is active.

DeviceStatus/Antivirus/StatusDeviceStatus/Antivirus/Status
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定防病毒状态的整数。Integer that specifies the status of the antivirus.

有效值:Valid values:

  • 0 – 防病毒已打开并监视0 – Antivirus is on and monitoring
  • 1 – 防病毒已禁用1 – Antivirus is disabled
  • 2 – 防病毒未监视设备/电脑或某些选项已关闭2 – Antivirus is not monitoring the device/PC or some options have been turned off
  • 3 (默认) – 防病毒暂时未完全监视设备/电脑3 (default) – Antivirus is temporarily not completely monitoring the device/PC
  • 4 – 防病毒不适用于此设备。4 – Antivirus not applicable for this device. 对于没有防病毒软件的设备(如没有防病毒 (API,将返回此方法。) This is returned for devices like the phone that do not have an antivirus (where the API doesn’t exist.)

支持的操作为 Get。Supported operation is Get.

DeviceStatus/AntispywareDeviceStatus/Antispyware
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 反间谍软件查询的节点。Node for the antispyware query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/Antispyware/SignatureStatusDeviceStatus/Antispyware/SignatureStatus
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定反间谍软件签名状态的整数。Integer that specifies the status of the antispyware signature.

有效值:Valid values:

  • 0 - 安全软件报告这不是最新版本。0 - The security software reports that it is not the most recent version.
  • 1 - 安全软件报告它是最新版本。1 - The security software reports that it is the most recent version.
  • 2 - 不适用。2 - Not applicable. 对于没有防病毒软件的设备(如没有防病毒 (API,将返回此方法。) This is returned for devices like the phone that do not have an antivirus (where the API doesn’t exist.)

支持的操作为 Get。Supported operation is Get.

如果多个反间谍软件提供程序处于活动状态,则此节点返回:If more than one antispyware provider is active, this node returns:

  • 1 – 如果每个活动的反间谍软件提供程序都有有效的签名状态。1 – If every active antispyware provider has a valid signature status.
  • 0 – 如果任何活动的反间谍软件提供程序的签名状态无效。0 – If any of the active antispyware providers has an invalid signature status.

当没有反间谍软件提供程序处于活动状态时,此节点也返回 0。This node also returns 0 when no antispyware provider is active.

DeviceStatus/Antispyware/StatusDeviceStatus/Antispyware/Status
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定反间谍软件状态的整数。Integer that specifies the status of the antispyware.

有效值:Valid values:

  • 0 - 安全提供程序类别的状态良好,无需用户注意。0 - The status of the security provider category is good and does not need user attention.
  • 1 - 安全提供程序类别的状态不由 Windows 安全中心 (WSC) 。1 - The status of the security provider category is not monitored by Windows Security Center (WSC).
  • 2 - 安全提供程序类别的状态较差,并且计算机可能处于风险中。2 - The status of the security provider category is poor and the computer may be at risk.
  • 3 - 安全提供程序类别为暂停状态。3 - The security provider category is in snooze state. 暂停表示 WSC 未主动保护计算机。Snooze indicates that WSC is not actively protecting the computer.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/FirewallDeviceStatus/Firewall
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 防火墙查询的节点。Node for the firewall query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/Firewall/StatusDeviceStatus/Firewall/Status
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定防火墙状态的整数。Integer that specifies the status of the firewall.

有效值:Valid values:

  • 0 – 防火墙已打开并监视0 – Firewall is on and monitoring
  • 1 – 防火墙已禁用1 – Firewall has been disabled
  • 2 – 防火墙未监视所有网络或某些规则已关闭2 – Firewall is not monitoring all networks or some rules have been turned off
  • 3 (默认) – 防火墙暂时未监视所有网络3 (default) – Firewall is temporarily not monitoring all networks
  • 4 – 不适用。4 – Not applicable. 对于没有防病毒软件的设备(如没有防病毒 (API,将返回此方法。) This is returned for devices like the phone that do not have an antivirus (where the API doesn’t exist.)

支持的操作为 Get。Supported operation is Get.

DeviceStatus/UACDeviceStatus/UAC
在 Windows 版本 1607 中添加。Added in Windows, version 1607. UAC 查询的节点。Node for the UAC query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/UAC/StatusDeviceStatus/UAC/Status
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定 UAC 状态的整数。Integer that specifies the status of the UAC.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/BatteryDeviceStatus/Battery
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 电池查询的节点。Node for the battery query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/Battery/StatusDeviceStatus/Battery/Status
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定电池状态的整数Integer that specifies the status of the battery

支持的操作为 Get。Supported operation is Get.

DeviceStatus/Battery/EstimatedChargeRemainingDeviceStatus/Battery/EstimatedChargeRemaining
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定剩余电池估计电量的整数。Integer that specifies the estimated battery charge remaining. 这是SYSTEM_POWER_STATUS 中的 BatteryLifeTime中返回的值。This is the value returned in BatteryLifeTime in SYSTEM_POWER_STATUS structure.

此值为设备未连接到交流电源时电池剩余时间秒数。The value is the number of seconds of battery life remaining when the device is not connected to an AC power source. 当连接到电源时,该值为 -1。When it is connected to a power source, the value is -1. 当估计未知时,值为 -1。When the estimation is unknown, the value is -1.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/Battery/EstimatedRuntimeDeviceStatus/Battery/EstimatedRuntime
在 Windows 版本 1607 中添加。Added in Windows, version 1607. 指定电池的估计运行时的整数。Integer that specifies the estimated runtime of the battery. 这是SYSTEM_POWER_STATUS 中的 BatteryLifeTime中返回的值。This is the value returned in BatteryLifeTime in SYSTEM_POWER_STATUS structure.

此值为设备未连接到交流电源时电池剩余时间秒数。The value is the number of seconds of battery life remaining when the device is not connected to an AC power source. 当连接到电源时,该值为 -1。When it is connected to a power source, the value is -1. 当估计未知时,值为 -1。When the estimation is unknown, the value is -1.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/DomainNameDeviceStatus/DomainName
在 Windows 版本 1709 中添加。Added in Windows, version 1709. 返回设备名称的完全限定 ((如果有) )。Returns the fully qualified domain name of the device (if any). 如果设备未加入域,它将返回空字符串。If the device is not domain-joined, it returns an empty string.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/DeviceGuardDeviceStatus/DeviceGuard
在 Windows 版本 1709 中添加。Added in Windows, version 1709. Device Guard 查询的节点。Node for Device Guard query.

支持的操作为 Get。Supported operation is Get.

DeviceStatus/DeviceGuard/VirtualizationBasedSecurityHwReqDeviceStatus/DeviceGuard/VirtualizationBasedSecurityHwReq
在 Windows 版本 1709 中添加。Added in Windows, version 1709. 基于虚拟化的安全硬件要求状态。Virtualization-based security hardware requirement status. 值为 256 值位掩码。The value is a 256 value bitmask.

  • 0x0:系统满足硬件配置要求0x0: System meets hardware configuration requirements
  • 0x1:需要 SecureBoot0x1: SecureBoot required
  • 0x2:需要 DMA 保护0x2: DMA Protection required
  • 0x4:来宾 VM 不支持 HyperV0x4: HyperV not supported for Guest VM
  • 0x8:HyperV 功能不可用0x8: HyperV feature is not available

支持的操作为 Get。Supported operation is Get.

DeviceStatus/DeviceGuard/VirtualizationBasedSecurityStatusDeviceStatus/DeviceGuard/VirtualizationBasedSecurityStatus
在 Windows 版本 1709 中添加。Added in Windows, version 1709. 基于虚拟化的安全状态。Virtualization-based security status. 值是下列值之一:Value is one of the following:

  • 0 - 正在运行0 - Running
  • 1 - 需要重新启动1 - Reboot required
  • 2 - 需要 64 位体系结构2 - 64 bit architecture required
  • 3 - 未许可3 - not licensed
  • 4 - 未配置4 - not configured
  • 5 - 系统不符合硬件要求5 - System doesn't meet hardware requirements
  • 42 – 其他。42 – Other. Microsoft-Windows-DeviceGuard 中的事件日志具有更多详细信息Event logs in Microsoft-Windows-DeviceGuard have more details

支持的操作为 Get。Supported operation is Get.

DeviceStatus/DeviceGuard/LsaCfgCredGuardStatusDeviceStatus/DeviceGuard/LsaCfgCredGuardStatus
在 Windows 版本 1709 中添加。Added in Windows, version 1709. 本地系统颁发 (LSA) 凭据保护状态。Local System Authority (LSA) credential guard status.

  • 0 - 正在运行0 - Running
  • 1 - 需要重新启动1 - Reboot required
  • 2 - 未获得 Credential Guard 许可2 - Not licensed for Credential Guard
  • 3 - 未配置3 - Not configured
  • 4 - VBS 未运行4 - VBS not running

支持的操作为 Get。Supported operation is Get.