WMI实现远程监控多台windows服务器

最新推荐文章于 2024-03-19 23:32:22 发布

weixin_33869377

最新推荐文章于 2024-03-19 23:32:22 发布

阅读量783

点赞数

文章标签：操作系统 java python

原文链接：https://my.oschina.net/chuibilong/blog/687554

版权

2019独角兽企业重金招聘Python工程师标准>>>

简介

WMI简介：

WMI（Windows Management Instrumentation,Windows 管理规范）是一项核心的 Windows 管理技术；用户可以使用 WMI 管理本地和远程计算机。

WQL简介：

WQL就是WMI中的查询语言，WQL的全称是WMI Query Language，简称为WQL，翻译成中文好像可以成为Windows管理规范查询语言。熟悉SQL语言的朋友会感觉它和SQL非常相似。

WQL其实非常简单，它有如下特点：

1、每个WQL语句必须以SELECT开始；

2、SELECT后跟你需要查询的属性名（我刚才对应SQL将其称之为字段名了），也可以像SQL一样，以*表示返回所有属性值；

3、FROM关键字；

4、你要查询的类的名字；

5、另外，如果你想精确查询结果还可以加上WHERE条件从句。比如某个类有Enable属性，你可以在查询的时候加上WHERE ENABLE=true，条件可以添加and or等关系操作。

如以下的都是正确的WQL语句：

Select * From Win32_LogicalDisk where drivetype=3 ’‘’‘查询所有硬盘分区

SELECT * FROM Win32_share ’‘查询所有共享目录

SELECT * FROM Win32_NetworkAdapterConfiguration WHERE DHCPEnabled=TRUE

SELECT Description FROM Win32_Account WHERE Name='Administrator'

SELECT Freespace,DeviceID FROM Win32_LogicalDisk

在搜索框输入wbemtest即可查看WQL测试工具

转载：http://my.oschina.net/noahxiao/blog/73163

1、环境准备

a、windows要开启Remote Registry与Windows Management Instrumentation服务

b、禁用放火墙

c、window2008系统注册表越狱（高版本的win）

需要修改regedit中HKEY_CLASSES_ROOT\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}的权限，windows2008不再给Administrators完全控制权。

http://files.helgeklein.com/downloads/SetACL/current/SetACL%20(executable%20version).zip

set_wmi_reg_acl.cmd

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}" -ot reg -actn setowner -ownr "n:Administrators"

SetACL.exe -on "HKEY_CLASSES_ROOT\CLSID\{76A64158-CB41-11D1-8B02-00600806D9B6}" -ot reg -actn ace -ace "n:Administrators;p:full"

以超级管理员身份执行这个cmd，就会把owner与完全控制权限授予Administrators组

注意这里需要把这个cmd命令和SetACL.exe copy到C:\Windows\System32文件夹

2、程序代码

java类

import org.jinterop.dcom.common.JIException;

import org.jinterop.dcom.common.JISystem;

import org.jinterop.dcom.core.*;

import org.jinterop.dcom.impls.JIObjectFactory;

import org.jinterop.dcom.impls.automation.IJIDispatch;

import org.jinterop.dcom.impls.automation.IJIEnumVariant;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import java.net.UnknownHostException;

import java.util.logging.Level;

/**

* Created with IntelliJ IDEA.

* User: noah

* Date: 8/16/12

* Time: 8:00 AM

* To change this template use File | Settings | File Templates.

public class WmiService {

private JIComServer m_ComStub = null;

private IJIComObject m_ComObject = null;

private IJIDispatch m_Dispatch = null;

private String m_Address = null;

private JISession m_Session = null;

private IJIDispatch m_WbemServices = null;

private static final String WMI_CLSID = "76A6415B-CB41-11d1-8B02-00600806D9B6";

private static final String WMI_PROGID = "WbemScripting.SWbemLocator";

private Logger logger = LoggerFactory.getLogger(this.getClass());

public WmiService(String address) {

JISystem.setAutoRegisteration(true);

JISystem.getLogger().setLevel(Level.WARNING);

m_Address = address;

}

public void query(String strQuery) {

System.out.println("query:" + strQuery);

JIVariant results[] = new JIVariant[0];

try {

results = m_WbemServices.callMethodA("ExecQuery", new Object[]{new JIString(strQuery), JIVariant.OPTIONAL_PARAM(), JIVariant.OPTIONAL_PARAM(), JIVariant.OPTIONAL_PARAM()});

IJIDispatch wOSd = (IJIDispatch) JIObjectFactory.narrowObject((results[0]).getObjectAsComObject());

int count = wOSd.get("Count").getObjectAsInt();

IJIComObject enumComObject = wOSd.get("_NewEnum").getObjectAsComObject();

IJIEnumVariant enumVariant = (IJIEnumVariant) JIObjectFactory.narrowObject(enumComObject.queryInterface(IJIEnumVariant.IID));

IJIDispatch wbemObject_dispatch = null;

for (int c = 0; c < count; c++) {

Object[] values = enumVariant.next(1);

JIArray array = (JIArray) values[0];

Object[] arrayObj = (Object[]) array.getArrayInstance();

for (int j = 0; j < arrayObj.length; j++) {

wbemObject_dispatch = (IJIDispatch) JIObjectFactory.narrowObject(((JIVariant) arrayObj[j]).getObjectAsComObject());

}

String str = (wbemObject_dispatch.callMethodA("GetObjectText_", new Object[]{1}))[0].getObjectAsString2();

System.out.println("(" + c + "):");

System.out.println(str);

System.out.println();

}

} catch (JIException e) {

e.printStackTrace();

}

public void connect(final String domain, final String username, final String password) {

try {

m_Session = JISession.createSession(domain, username, password);

m_Session.useSessionSecurity(true);

m_Session.setGlobalSocketTimeout(5000);

m_ComStub = new JIComServer(JIProgId.valueOf(WMI_PROGID), m_Address, m_Session);

IJIComObject unknown = m_ComStub.createInstance();

m_ComObject = unknown.queryInterface(WMI_CLSID);

m_Dispatch = (IJIDispatch) JIObjectFactory.narrowObject(m_ComObject.queryInterface(IJIDispatch.IID));

JIVariant results[] = m_Dispatch.callMethodA(

"ConnectServer",

new Object[]{

new JIString(m_Address),

JIVariant.OPTIONAL_PARAM(),

JIVariant.OPTIONAL_PARAM()

}

);

m_WbemServices = (IJIDispatch) JIObjectFactory.narrowObject((results[0]).getObjectAsComObject());

} catch (JIException e) {

e.printStackTrace();

if (m_Session != null) {

try {

JISession.destroySession(m_Session);

} catch (JIException e1) {

logger.error(e.getMessage(), e);

}

} catch (UnknownHostException e) {

if (m_Session != null) {

try {

JISession.destroySession(m_Session);

} catch (JIException e1) {

logger.error(e.getMessage(), e);

}

public void disconnect() {

try {

JISession.destroySession(m_Session);

} catch (JIException e) {

logger.error(e.getMessage(), e);

}

public static void main(String[] args) {

WmiService wmiService = new WmiService("172.16.158.129");

//域（一般为空字符），用户名，密码

注意：链接的用户一定是超级管理员Administrator

wmiService.connect("", "username", "password");

//系统信息

wmiService.query("SELECT * FROM Win32_ComputerSystem");

//CPU信息

wmiService.query("SELECT * FROM Win32_PerfFormattedData_PerfOS_Processor WHERE Name != '_Total'");

//内存信息

wmiService.query("SELECT * FROM Win32_PerfFormattedData_PerfOS_Memory");

//磁盘信息

wmiService.query("SELECT * FROM Win32_PerfRawData_PerfDisk_PhysicalDisk Where Name != '_Total'");

wmiService.disconnect();

}

mavne配置(pom.xml)

<groupId>org.kohsuke.jinterop</groupId>

<artifactId>j-interop</artifactId>

<version>2.0.8-kohsuke-1</version>

</dependency>

3、有可能出现的问题

报错a

org.jinterop.dcom.common.JIException: Message not found for errorCode: 0xC0000034

at org.jinterop.winreg.smb.JIWinRegStub.winreg_OpenHKLM(JIWinRegStub.java:115)

at org.jinterop.dcom.core.JIProgId.getIdFromWinReg(JIProgId.java:130)

at org.jinterop.dcom.core.JIProgId.getCorrespondingCLSID(JIProgId.java:162)

at org.jinterop.dcom.core.JIComServer.<init>(JIComServer.java:413)

at org.noah.wmitest.WmiService.connect(WmiService.java:122)

at org.noah.wmitest.WmiService.main(WmiService.java:177)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:597)

at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)

Caused by: jcifs.smb.SmbException: The system cannot find the file specified.

at jcifs.smb.SmbTransport.checkStatus(SmbTransport.java:522)

at jcifs.smb.SmbTransport.send(SmbTransport.java:622)

at jcifs.smb.SmbSession.send(SmbSession.java:239)

at jcifs.smb.SmbTree.send(SmbTree.java:109)

at jcifs.smb.SmbFile.send(SmbFile.java:718)

at jcifs.smb.SmbFile.open0(SmbFile.java:923)

at jcifs.smb.SmbFile.open(SmbFile.java:940)

at jcifs.smb.SmbFileOutputStream.<init>(SmbFileOutputStream.java:142)

at jcifs.smb.TransactNamedPipeOutputStream.<init>(TransactNamedPipeOutputStream.java:32)

at jcifs.smb.SmbNamedPipe.getNamedPipeOutputStream(SmbNamedPipe.java:187)

at rpc.ncacn_np.RpcTransport.attach(RpcTransport.java:92)

at rpc.Stub.attach(Stub.java:105)

at rpc.Stub.call(Stub.java:110)

at org.jinterop.winreg.smb.JIWinRegStub.winreg_OpenHKLM(JIWinRegStub.java:113)

... 10 more

需要开启Remote Registry服务

报错b

org.jinterop.dcom.common.JIException: Message not found for errorCode: 0xC0000001

at org.jinterop.winreg.smb.JIWinRegStub.winreg_OpenHKLM(JIWinRegStub.java:115)

at org.jinterop.dcom.core.JIProgId.getIdFromWinReg(JIProgId.java:130)

at org.jinterop.dcom.core.JIProgId.getCorrespondingCLSID(JIProgId.java:162)

at org.jinterop.dcom.core.JIComServer.<init>(JIComServer.java:413)

at org.noah.wmitest.WmiService.connect(WmiService.java:87)

at org.noah.wmitest.WmiService.main(WmiService.java:142)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:597)

at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)

Caused by: jcifs.smb.SmbException: Connection timeout

jcifs.util.transport.TransportException: Connection timeout

或

org.jinterop.dcom.common.JIException: Message not found for errorCode: 0x8001FFFF

at org.jinterop.dcom.core.JIComServer.init(JIComServer.java:576)

at org.jinterop.dcom.core.JIComServer.initialise(JIComServer.java:481)

at org.jinterop.dcom.core.JIComServer.<init>(JIComServer.java:414)

at org.noah.wmitest.WmiService.connect(WmiService.java:87)

at org.noah.wmitest.WmiService.main(WmiService.java:142)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:597)

at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)

Caused by: java.net.ConnectException: Connection timed out

转载于:https://my.oschina.net/chuibilong/blog/687554

weixin_33869377

关注

0
点赞
踩
2

收藏

觉得还不错? 一键收藏
0
评论
WMI实现远程监控多台windows服务器

2019独角兽企业重金招聘Python工程师标准>>> ...
复制链接

扫一扫

WMI实现远程监控多台windows服务器

简介

1、环境准备

2、程序代码

3、有可能出现的问题

“相关推荐”对你有帮助么？