Query Windows information via WMI Explorer

WMI Explorer is a utility that lets you browse and view WMI namespaces, classes, instances, and properties in a single pane. It draws inspiration from the PowerShell-based WMI Explorer. In this article, we will show you how to download, query Windows information via WMI Explorer. Please see How to Enable and Disable WMI Traffic through Windows CMD, and how to dedtermine why an MBAM-protected device is non-compliant.

Note: WMI (Windows Management Instrumentation) in PowerShell uses several cmdlets such as the Get-WmiObject. The Get-WmiObject retrieves instances of WMI classes or information from the WMI repository. Also, the Get-CimInstance which is similar to Get-WmiObject uses the newer CIM (Common Information Model) standard, which is more robust and network-friendly.

Other cmdlets are Invoke-WmiMethod, New-CimInstance, Set-CimInstance, Remove-CimInstance, and Set-WmiInstance are other common cmdlets asscoated with the WMI. These cmdlets allow you to interact with the WMI subsystem in PowerShell, performing tasks such as querying system information, invoking methods, and managing system configurations.

Please see how to Get a list of installed applications on Windows, and how to fix How to fix Get-CimInstance Access PermissionDenied.

More on WMI and CIM

WMI is a Windows management platform that lets you query management and operations information.

You can use it to query local and remote PCs for details like running processes, installed applications, BIOS information, and much more, which is exactly why I downloaded this tool. WMI is based on the Common Information Model (CIM), an open-source standard for accessing and displaying information.

You can also use CIM cmdlets to query remote devices. PowerShell uses WinRM, known as PowerShell remoting, to establish a secure connection and authenticate with Kerberos.

Here are some interesting articles on how WMI works in practice. WinRM cannot complete the operation, verify that the specified computer name is valid, Get a list of installed programs locally or remotely in Windows, and how to find Computer Model and Serial Number.

Download WMI Explorer

Here are the minimum requirements to run the WMI Explorer utility:

Microsoft .NET Framework 4.5.1
Minimum display resolution: 1024×768
Administrator’s privilege to view some WMI objects. Else, access will be denied.

Kindly use this link to download the WMI Explorer from the official GitHub repository where WMI Explorer is hosted. Navigate to the “Releases” section and download the ZIP file.

The file has been downloaded.

Upon downloaded, I will extract the ZIP file as shown below.

No installation. Launch the executable file to start browsing and viewing WMI namespaces, classes, and instances.

You may also want to see: Remote WMI Connection: How to enable or disable WMI Traffic Using Firewall UI, and Remote WMI Connection: Manage Traffic via Command Prompt.

Running WMI Utility [Exploring CIM classes]

Run WmiExplorer.exe to enter the Computer name in the field and click Connect. This will connect WMI Explorer to the local computer or remote PC and explore the available classes on the local or remote device.

The Win32_TPM class in WMI provides information about the Trusted Platform Module (TPM) on a computer. The TPM is a hardware security feature that can securely store cryptographic keys and perform cryptographic operations.

Below are some of the key properties of the Win32_TPM class.

IsEnabled_InitialValue: Indicates that the TPM was enabled when it was initialized
IsActivated_InitialValue: Shows that the TPM was activated when it was initialized.
ManufacturerID: A unique identifier assigned by the TPM manufacturer
ManufacturerVersion: Indicates the version of the TPM firmware
ManufacturerVersion_InitialValue: Indicates the TPM firmware version when it was first initialised

FAQs

How do I search for specific WMI classes or properties using WMI Explorer?

To search for specific WMI classes or properties in WMI Explorer:
– Open WMI Explorer and connect to the local or a remote computer.
– Navigate through the WMI namespaces in the left pane to find the relevant class.
– Use the search bar or the filter option to narrow down the list of classes by typing the class name or a part of it.
– Once you’ve found the class, you can view its properties, methods, and instances in the main window.

Can I use WMI Explorer to execute WMI queries and scripts?

WMI Explorer allows you to execute WMI queries directly. In WMI Explorer:
– Select a WMI class from the list.
– Use the built-in query window to write and execute WMI Query Language (WQL) queries. These queries can retrieve specific data from WMI, such as system information, process details, or configuration settings.
– WMI Explorer will display the results of the query in the output pane, allowing you to view or export the data.

I hope you found this article useful on how to query Windows information via WMI Explorer. Please feel free to leave a comment below.