几个 WMI 的例子（初级） - 4
读取日志记录：
Imports System
Imports System.Management
Module Module1
Public Sub Main()
Dim strComputer = "magicdog"
Dim wbemServices, wbemObjectSet, wbemObject
wbemServices = GetObject("winmgmts:\\" & strComputer)
wbemObjectSet = wbemServices.InstancesOf("Win32_NTLogEvent")
For Each wbemObject In wbemObjectSet
Console.WriteLine("日志文件：" & wbemObject.LogFile)
Console.WriteLine("记录号：" & wbemObject.RecordNumber)
Console.WriteLine("类型：" & wbemObject.Type)
Console.WriteLine("产生时间：" & wbemObject.TimeGenerated)
Console.WriteLine("源名称：" & wbemObject.SourceName)
Console.WriteLine("事件代码：" & wbemObject.EventCode)
Console.WriteLine("用户" & wbemObject.User)
Console.WriteLine("计算机名：" & wbemObject.ComputerName)
Console.WriteLine("信息：" & wbemObject.Message)
Next
End Sub
End Module
---------------------------------------------------------------------------------------
删除日志文件：（请先备份）
Imports System
Imports System.Management
Module Module1
Public Sub Main()
Dim strComputer = "."
Dim objWMIService, objLogFiles, objLogFile, logs, mylogs(3)
objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate,（Backup）}!\\" & strComputer & "\root\cimv2")
mylogs(1) = "application"
mylogs(2) = "system"
mylogs(3) = "security"
For Each logs In mylogs
objLogFiles = objWMIService.ExecQuery("Select * from Win32_NTEventLogFile where LogFileName='" & logs & "'")
For Each objLogFile In objLogFiles
objLogFile.ClearEventLog()
Next
Next
End Sub
End Module
---------------------------------------------------------------------------------------
使用性能计数器：
Imports System
Imports System.Management
Module Module1
Public Sub Main()
Dim strComputer As String = ".", i, intValue As Integer
Dim colItems, objWMIService, objItem
objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
For i = 1 To 5
Threading.Thread.Sleep(1000)
colItems = objWMIService.ExecQuery("Select * From Win32_PerfRawData_PerfProc_Process Where Name = 'devenv'")
For Each objItem In colItems
intValue = objItem.HandleCount
Console.WriteLine("打开的句柄数 ：" & intValue)
Next
Next
End Sub
End Module
使用Getobject函数创建对象多用于脚本中，所以参数为WMI脚本库的标记名"winmgmts:"和目标电脑名，上述的strComputer="."相当于localhost，若在远程计算机上执行则需将”.”改这相应的计算机名。
其中：
ManagementObject：单个管理对象
ManagementClass：单个管理类
ManagementObjectSearcher：查询管理对象及管理类的集合
ManagementEventWatcher：监视来自 WMI 的事件
ManagementQuery：用作所有查询类的基础。
也可以从脚本中创建：
Set oLocator = CreateObject("WbemScripting.SWbemLocator") ' New SWbemLocator
If Err.Number <> 0 Then
MsgBox "Windows Management (WMI) 不能被创建” & Err.Description
WScript.Quit(0)
End If
-----------------------------------------------------------------------
set locator = createobject("WbemScripting.SwbemLocator")
set server = locator.ConnectServer ("\\192.168.0.1\root\cimv2","username","password")
set p_obj = server.execquery("select * form Win32_operatingsystem")
for each p_objswbem in p_obj
p_objswbem.reboot ‘从新启动
next
WMI 的有关概述请参考 MSDN 或 http://www.csdn.net/develop/Article/19/19157.shtm