Windows 논리 디스크 검색

Microsoft.Windows.Client.Vista.LogicalDisk.Discovery (Discovery)

이 규칙은 WMI를 사용하여 이동식 드라이브 및 네트워크 드라이브를 제외한 모든 Windows 논리 디스크를 검색합니다. 드라이브 문자 없이 장착된 드라이브는 검색되지 않습니다. 이러한 드라이브에 대해서는 별도의 검색 규칙을 사용합니다.

Knowledge Base article:

요약

이 검색 규칙은 "Windows 2003 클라이언트 논리 디스크" Windows 클라이언트 클래스를 검색하여 Windows 2003 클라이언트에서 검색된 논리 디스크(예: C:, D:)의 인스턴스 정보를 표시합니다. 이때 로컬 디스크만 검색되며 이동식, 컴팩트 디스크, 네트워크 드라이브 및 RAM 디스크로 분류되는 논리 디스크는 제외됩니다.

Element properties:

Target	Microsoft.Windows.Client.Vista.OperatingSystem
Enabled	True
Frequency	14400
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.Windows.Client.Vista.LogicalDisk DeviceID Name Description FileSystem Compressed Size DriveType SupportsDiskQuota QuotasDisabled SupportsFileBasedCompression
Discovered relationships and their attribuets:
Microsoft.Windows.ComputerHostsLogicalDevice

Member Modules:

ID	Module Type	TypeId	RunAs
DiscoveryDataSource	DataSource	Microsoft.Windows.WmiProviderWithClassSnapshotDataMapper	System.PrivilegedMonitoringAccount

Source Code:

<Discovery ID="Microsoft.Windows.Client.Vista.LogicalDisk.Discovery" Enabled="true" Target="Microsoft.Windows.Client.Vista.OperatingSystem">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Windows.Client.Vista.LogicalDisk">

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="DeviceID"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Name"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Description"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="FileSystem"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="Compressed"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="Size"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="DriveType"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="SupportsDiskQuota"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="QuotasDisabled"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="SupportsFileBasedCompression"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Windows!Microsoft.Windows.ComputerHostsLogicalDevice"/>

  </DiscoveryTypes>

  <DataSource ID="DiscoveryDataSource" RunAs="System!System.PrivilegedMonitoringAccount" TypeID="Windows!Microsoft.Windows.WmiProviderWithClassSnapshotDataMapper">

    <NameSpace>\\$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$\root\cimv2</NameSpace>

    <Query>SELECT DeviceID,Name,Description,FileSystem,Compressed,Size,DriveType,SupportsDiskQuotas,QuotasDisabled,SupportsFileBasedCompression FROM Win32_LogicalDisk WHERE DriveType=3 and FileSystem!=null</Query>

    <Frequency>14400</Frequency>

    <ClassId>$MPElement[Name="Microsoft.Windows.Client.Vista.LogicalDisk"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/DeviceID$</Name>

          <Value>$Data/Property[@Name='DeviceID']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/Name$</Name>

          <Value>$Data/Property[@Name='Name']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/Description$</Name>

          <Value>$Data/Property[@Name='Description']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/FileSystem$</Name>

          <Value>$Data/Property[@Name='FileSystem']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/Compressed$</Name>

          <Value>$Data/Property[@Name='Compressed']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/Size$</Name>

          <Value>$Data/Property[@Name='Size']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/DriveType$</Name>

          <Value>$Data/Property[@Name='DriveType']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/SupportsDiskQuota$</Name>

          <Value>$Data/Property[@Name='SupportsDiskQuotas']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/QuotasDisabled$</Name>

          <Value>$Data/Property[@Name='QuotasDisabled']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/SupportsFileBasedCompression$</Name>

          <Value>$Data/Property[@Name='SupportsFileBasedCompression']$</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

  </DataSource>

</Discovery>