Difference between revisions of "WMI client (WMIC) for Linux"

From RHS Wiki
Jump to navigation Jump to search
Line 31: Line 31:
 
# Navigate to: Local Computer Policy/Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options
 
# Navigate to: Local Computer Policy/Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options
 
# In the right panel look for “Network Security : LAN Manager authentication level"
 
# In the right panel look for “Network Security : LAN Manager authentication level"
 +
 +
Remote admin must be enabled:
 +
from cmd type:
 +
netsh firewall set service type = remoteadmin mode = enable

Revision as of 11:29, 1 February 2016

Windows Management Instrumentation (WMI)

WMI Allows you to remotely execute commands and query parameters on a Windows Host

Linux

In order to be able to communicate with WMI from Linux you need to install this functionability.
For Ubuntu 14.04:
Download this libraries and install them:

 dpkg -i libwmiclient1_1.3.14-3_amd64.deb
 dpkg -i wmi-client_1.3.14-3_amd64.deb
  • Required: python-support
sudo apt-get install python-support

Examples

get the size of the WorkingSet of the process “java.exe” running on the remote host 192.168.20.20

wmic -U Administrator%mysecret //192.168.20.20 "Select WorkingSetSize from Win32_Process Where CommandLine like '%java.exe%'"

Get process ID for process

wmic -U Administrator%mysecret //10.140.10.10 "Select ProcessId from Win32_Process Where CommandLine like '%java.exe%'"

Get WorkingSetSize for process

wmic -U Administrator%mysecret //10.140.10.10 "Select WorkingSetSize from Win32_Process Where CommandLine like '%java.exe%'"

Get thread count for process

wmic -U Administrator%mysecret //10.140.10.10 "Select ThreadCount from Win32_Process Where CommandLine like '%java.exe%'"

Get private bytes for process

wmic -U Administrator%mysecret //10.140.10.10 "Select PrivateBytes from Win32_PerfFormattedData_PerfProc_Process Where IDProcess='%java.exe%'"

Get free physical memory for host

wmic -U Administrator%mysecret //10.140.10.10 "Select FreePhysicalMemory from Win32_OperatingSystem"

Windows host config

The windows machine you are connecting to must have AN Manager Authentication level set to:
Send LM & NTLM - use NTLMv2 session security if negotiated

  1. Start --> run --> gpedit.msc
  2. Navigate to: Local Computer Policy/Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options
  3. In the right panel look for “Network Security : LAN Manager authentication level"

Remote admin must be enabled: from cmd type:

netsh firewall set service type = remoteadmin mode = enable