• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1159
  • Last Modified:

Query Windows audit settings using WMI

Using REALbasic with the Monkeybread WMI plugin, I can query 57 of the 59 RSOP_xxx classes without error, but I only get data returned for these eight:
    RSOP_ExtensionEventSource
    RSOP_ExtensionEventSourceLink
    RSOP_ExtensionStatus
    RSOP_GPLink
    RSOP_GPO
    RSOP_PolicySetting
    RSOP_Session
    RSOP_SOM

I'm guessing that there is some security setting that keeps WMI from returning data for the other ones for which I know data exists -- specifically
    RSOP_AuditPolicy
    RSOP_RegistryKey
    RSOP_RegistryPolicySetting
    RSOP_RegistryValue
and some others.

Any ideas?
0
Roland_F
Asked:
Roland_F
  • 2
  • 2
1 Solution
 
David Johnson, CD, MVPOwnerCommented:
if you use wmispy or other wmi tools i.e. powershell does it return a proper value?
0
 
Roland_FAuthor Commented:
I don't know - I've never touched WMI except with VB and this current code. I'll do a little research and try to find out.
0
 
David Johnson, CD, MVPOwnerCommented:
0
 
Roland_FAuthor Commented:
I could not find a download for WniSpy from a source I considered reliable. i did find WMI Explorer, though, which is a very handy free tool. Using WMI Explorer I find that those classes that don't return any data don't have any instances -- which is frustrating because I have done considerable work with secpol.msc to establish security and audit policies. Anyway, I will accept this one response as the solution to this particular problem. Have to look farther to get where I need to go. Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now