CIM/WMI cmdlets in PowerShell

Introduction

CIM and WMI cmdlets let you get information about your computer and control it using simple commands.

Check your computer's hardware details like CPU or memory.

Find out which programs are running on your computer.

Get information about your network settings.

Start or stop services on your computer.

Monitor system events or errors.

Syntax

PowerShell

Get-CimInstance -ClassName <ClassName> [-ComputerName <Name>] [-Filter <Filter>]
Get-WmiObject -Class <ClassName> [-ComputerName <Name>] [-Filter <Filter>]

Get-CimInstance is the newer, faster way to get info from your computer.

Get-WmiObject is older but still works on many systems.

Examples

Shows details about the operating system on your computer.

PowerShell

Get-CimInstance -ClassName Win32_OperatingSystem

Gets information about the CPU using the older WMI cmdlet.

PowerShell

Get-WmiObject -Class Win32_Processor

Lists all services that are currently running.

PowerShell

Get-CimInstance -ClassName Win32_Service -Filter "State = 'Running'"

Sample Program

This script shows basic info about your operating system and lists all running services with their names.

PowerShell

Write-Output "Operating System Info:"
Get-CimInstance -ClassName Win32_OperatingSystem | Select-Object Caption, Version, OSArchitecture

Write-Output "Running Services:"
Get-CimInstance -ClassName Win32_Service -Filter "State = 'Running'" | Select-Object Name, DisplayName | Sort-Object Name

Important Notes

Use Get-CimInstance for better performance and newer features.

Filters help you get only the information you need, making commands faster.

Running these commands may require administrator rights depending on what info you want.

Summary

CIM/WMI cmdlets let you ask your computer about its parts and status.

Get-CimInstance is the modern way; Get-WmiObject is older but still useful.

You can filter results to see only what matters to you.

Practice

1. What does the PowerShell cmdlet Get-CimInstance do?

easy

A. Starts a new PowerShell session.

B. Retrieves management information from local or remote computers using CIM.

C. Deletes files from the system.

D. Installs software packages.

Solution

1. Step 1: Understand the purpose of Get-CimInstance

   Get-CimInstance is used to get management data from computers, like hardware or software info.

2. Step 2: Compare options with cmdlet purpose

   Only Retrieves management information from local or remote computers using CIM. describes retrieving management info, matching the cmdlet's function.

3. Final Answer:

   Retrieves management information from local or remote computers using CIM. -> Option B

4. Quick Check:

   Get-CimInstance = Retrieves info [OK]

Hint: Get-CimInstance fetches system info, not file or session tasks [OK]

Common Mistakes:

• Confusing Get-CimInstance with file or session commands
• Thinking it installs software
• Assuming it deletes files

2. Which of the following is the correct syntax to get the list of running processes using CIM cmdlets?

easy

A. Get-CimInstance -ClassName Win32_Process

B. Get-CimInstance Win32_Process

C. Get-WmiObject -Class Win32_Process

D. Get-Process -ClassName Win32_Process

Solution

1. Step 1: Identify correct syntax for Get-CimInstance

   The correct parameter to specify the class is -ClassName, so Get-CimInstance -ClassName Win32_Process is valid.

2. Step 2: Check other options for syntax errors

   Get-CimInstance Win32_Process misses the parameter name, Get-WmiObject -Class Win32_Process uses Get-WmiObject (older cmdlet), and Get-Process -ClassName Win32_Process uses Get-Process incorrectly with a class parameter.

3. Final Answer:

   Get-CimInstance -ClassName Win32_Process -> Option A

4. Quick Check:

   Correct syntax uses -ClassName parameter [OK]

Hint: Use -ClassName to specify CIM class in Get-CimInstance [OK]

Common Mistakes:

• Omitting -ClassName parameter
• Mixing Get-CimInstance with Get-WmiObject syntax
• Using Get-Process with CIM class names

3. What will be the output of this command?

Get-CimInstance -ClassName Win32_OperatingSystem | Select-Object -Property Caption

medium

A. A list of running processes.

B. The computer's network adapter details.

C. An error about invalid property.

D. The name of the operating system installed on the computer.

Solution

1. Step 1: Understand the CIM class and property

   The class Win32_OperatingSystem contains OS info; the property Caption holds the OS name.

2. Step 2: Analyze the command output

   Selecting Caption will output the OS name, not processes or network info, and no error occurs.

3. Final Answer:

   The name of the operating system installed on the computer. -> Option D

4. Quick Check:

   Win32_OperatingSystem Caption = OS name [OK]

Hint: Win32_OperatingSystem class holds OS info; Caption is OS name [OK]

Common Mistakes:

• Confusing OS info with process or network info
• Expecting full object instead of selected property
• Assuming property Caption does not exist

4. You run this command but get an error:

Get-CimInstance -Class Win32_Processor

What is the likely cause?

medium

A. The parameter name should be -ClassName, not -Class.

B. Win32_Processor is not a valid CIM class.

C. Get-CimInstance cannot query processor info.

D. You need administrator rights to run this command.

Solution

1. Step 1: Check the parameter name used

   The correct parameter for specifying the class in Get-CimInstance is -ClassName, not -Class.

2. Step 2: Verify class validity and permissions

   Win32_Processor is a valid class and Get-CimInstance can query it; admin rights are usually not required for this query.

3. Final Answer:

   The parameter name should be -ClassName, not -Class. -> Option A

4. Quick Check:

   Use -ClassName parameter with Get-CimInstance [OK]

Hint: Use -ClassName, not -Class, with Get-CimInstance [OK]

Common Mistakes:

• Using -Class instead of -ClassName
• Assuming class is invalid
• Thinking admin rights are needed

5. You want to list all services that are currently running on a remote computer named 'Server01' using CIM cmdlets. Which command is correct?

hard

A. Get-CimInstance -ClassName Win32_Service -ComputerName Server01 | Where-Object { $_.Status -eq 'Running' }

B. Get-WmiObject -Class Win32_Service -ComputerName Server01 | Where-Object { $_.Status -eq 'Running' }

C. Get-CimInstance -ClassName Win32_Service -ComputerName Server01 | Where-Object { $_.State -eq 'Running' }

D. Get-CimInstance -ClassName Win32_Service -ComputerName Server01 | Where-Object { $_.State -eq 'Stopped' }

Solution

1. Step 1: Identify the correct property for running services

   The property State with value 'Running' correctly filters running services in Win32_Service.

2. Step 2: Choose the correct cmdlet and filter

   Using Get-CimInstance with -ComputerName is modern and correct. Filtering with Where-Object { $_.State -eq 'Running' } matches running services.

3. Final Answer:

   Get-CimInstance -ClassName Win32_Service -ComputerName Server01 | Where-Object { $_.State -eq 'Running' } -> Option C

4. Quick Check:

   Filter by State='Running' with Get-CimInstance [OK]

Hint: Filter services by State='Running' using Get-CimInstance [OK]

Common Mistakes:

• Using Status instead of State property
• Filtering for 'Stopped' instead of 'Running'
• Mixing Get-WmiObject with CIM cmdlets