Home
  •  

探索 Windows 邏輯磁碟

Microsoft.Windows.Client.XP.LogicalDisk.Discovery (Discovery)

此規則使用 WMI 探索卸除式磁碟及網路磁碟除外的所有 Windows 邏輯磁碟。此規則不會探索無磁碟機代號的裝載磁碟機。這類磁碟機另有不同的探索規則。

Knowledge Base article:

摘要

此探索規則會探索名為「Windows Client 2003 邏輯磁碟」的 Windows 用戶端類別，並於其中填入在 Windows 2003 用戶端上探索到的邏輯磁碟 (例如 C:、D:) 的執行個體。請注意此規則只會偵測本機磁碟。歸類為卸除式、光碟、網路磁碟機和 RAM 磁碟的邏輯磁碟均排除在外。

Element properties:

TargetMicrosoft.Windows.Client.XP.OperatingSystem
EnabledTrue
Frequency3605
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:
Discovered relationships and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DiscoveryDataSource DataSource Microsoft.Windows.WmiProviderWithClassSnapshotDataMapper System.PrivilegedMonitoringAccount

Source Code:

<Discovery ID="Microsoft.Windows.Client.XP.LogicalDisk.Discovery" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.Client.XP.OperatingSystem">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Windows.Client.XP.LogicalDisk">

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="DeviceID"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Name"/>

      <Property TypeID="Windows!Microsoft.Windows.LogicalDevice" PropertyID="Description"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="FileSystem"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="Compressed"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="Size"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="DriveType"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="SupportsDiskQuota"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="QuotasDisabled"/>

      <Property TypeID="WindowsClient!Microsoft.Windows.Client.LogicalDisk" PropertyID="SupportsFileBasedCompression"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Windows!Microsoft.Windows.ComputerHostsLogicalDevice"/>

  </DiscoveryTypes>

  <DataSource ID="DiscoveryDataSource" RunAs="System!System.PrivilegedMonitoringAccount" TypeID="Windows!Microsoft.Windows.WmiProviderWithClassSnapshotDataMapper">

    <NameSpace>\\$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$\root\cimv2</NameSpace>

    <Query>SELECT * FROM Win32_LogicalDisk WHERE (DriveType=3 or DriveType=6) and FileSystem!=null</Query>

    <Frequency>3605</Frequency>

    <ClassId>$MPElement[Name="Microsoft.Windows.Client.XP.LogicalDisk"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/DeviceID$</Name>

          <Value>$Data/Property[@Name='DeviceID']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/Name$</Name>

          <Value>$Data/Property[@Name='Name']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.LogicalDevice"]/Description$</Name>

          <Value>$Data/Property[@Name='Description']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/FileSystem$</Name>

          <Value>$Data/Property[@Name='FileSystem']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/Compressed$</Name>

          <Value>$Data/Property[@Name='Compressed']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/Size$</Name>

          <Value>$Data/Property[@Name='Size']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/DriveType$</Name>

          <Value>$Data/Property[@Name='DriveType']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/SupportsDiskQuota$</Name>

          <Value>$Data/Property[@Name='SupportsDiskQuotas']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/QuotasDisabled$</Name>

          <Value>$Data/Property[@Name='QuotasDisabled']$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="WindowsClient!Microsoft.Windows.Client.LogicalDisk"]/SupportsFileBasedCompression$</Name>

          <Value>$Data/Property[@Name='SupportsFileBasedCompression']$</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

  </DataSource>

</Discovery>