Security Center via WMI

  • Thread starter Thread starter Chip Andrews
  • Start date Start date
C

Chip Andrews

Is anyone aware of how to access the Windows XP Security Center via WMI? I
only need it in a read-only capacity. The primary usage would be to query
clients as to whether there are any Security Center alerts on their machines
before they get network access.

Chip
 
I don't beleive you will be able to find the alerts in WMI. You can however
gather FIrewall and Anti-Virus Products installed.

Look under the namespace root\SecurityCenter.
 
Thanks you for responding.

When I attempt to query on /root/SecurityCenter/AntiVirusProduct or
/root/SecurityCenter/FirewallProduct, it always returns "The selected
classes do not have instances" using the WMI Object Browser. Does this
sound correct?

Chip
 
It is possible depending if the AV and Firewall you are using do not follow
the guidelines and use WMI to add their info. This will then cause the
Security Center to not be able to report any FW or AV software.

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
 
I donot think you can query on root\secuirtycenter\antivirusproduct.
The way i am doing it is query on root\securitycenter, then click on the
antivirusproduct on the left list, then click "Instance" button on the top
right side, then you will be able to see the antivirus sw installed in your
system.

Hopefully it will help.

Cheers,
talpey
 
If the security product doesn’t properly report to security center, you may want to check out OESIS which calls WMI and has fall-back detection for apps that don’t properly report.
 
Back
Top