wmic获取进程名称以及可执行路径:
wmicprocessgetname,executablepath
wmic删除指定进程(根据进程名称):
wmicprocesswherename="qq.exe"callterminate
或者用
wmicprocesswherename="qq.exe"delete
wmic删除指定进程(根据进程PID):
wmicprocesswherepid="123"delete
wmic创建新进程
wmicprocesscallcreate"C:\ProgramFiles\Tencent\QQ\QQ.exe"
在远程机器上创建新进程:
wmic/node:192.168.1.10/user:administrator/password:123456processcallcreatecmd.exe
关闭本地计算机
wmicprocesscallcreateshutdown.exe
重启远程计算机
wmic/node:192.168.1.10/user:administrator/password:123456processcallcreate"shutdown.exe-r-f-m"
更改计算机名称
wmiccomputersystemwhere"caption='%ComputerName%'"callrenamenewcomputername
更改帐户名
wmicUSERACCOUNTwhere"name='%UserName%'"callrenamenewUserName
wmic结束可疑进程(根据进程的启动路径)
wmicprocesswhere"name='explorer.exe'andexecutablepath<>'%SystemDrive%\\windows\\explorer.exe'"delete
wmic获取物理内存
wmicmemlogicalgetTotalPhysicalMemory|find/i/v"t"
wmic获取文件的创建、访问、修改时间
@echooff
for/f"skip=1tokens=1,3,5delims=."%%ain('wmicdatafilewherename^="c:\\windows\\system32\\notepad.exe"getCreationDate^,LastAccessed^,LastModified')do(
seta=%%a
setb=%%b
setc=%%c
echo文件:c:\windows\system32\notepad.exe
echo.
echo创建时间:%a:~0,4%年%a:~4,2%月%a:~6,2%日%a:~8,2%时%a:~10,2%分%a:~12,2%秒
echo最后访问:%b:~0,4%年%b:~4,2%月%b:~6,2%日%b:~8,2%时%b:~10,2%分%b:~12,2%秒
echo最后修改:%c:~0,4%年%c:~4,2%月%c:~6,2%日%c:~8,2%时%c:~10,2%分%c:~12,2%秒
)
echo.
pause
wmic全盘搜索某文件并获取该文件所在目录
for/f"skip=1tokens=1*"%iin('wmicdatafilewhere"FileName='qq'andextension='exe'"getdrive^,path')do(set"qPath=%i%j"
获取屏幕分辨率wmicDESKTOPMONITORwhereStatus='ok'getScreenHeight,ScreenWidth
wmicPageFileSetsetInitialSize="512",MaximumSize="512"
设置虚拟内存到E盘,并删除C盘下的页面文件,重启计算机后生效
wmicPageFileSetcreatename="E:\\pagefile.sys",InitialSize="1024",MaximumSize="1024"
wmicPageFileSetwhere"name='C:\\pagefile.sys'"delete
获得进程当前占用的内存和最大占用内存的大小:
wmicprocesswherecaption='filename.exe'getWorkingSetSize,PeakWorkingSetSize
以KB为单位显示
@echooff
for/f"skip=1tokens=1-2delims="%%ain('wmicprocesswherecaption^="conime.exe"getWorkingSetSize^,PeakWorkingSetSize')do(
set/am=%%a/1024
set/amm=%%b/1024
echo进程conime.exe现在占用内存:%m%K;最高占用内存:%mm%K
)
pause
远程打开计算机远程桌面
wmic/node:%pcname%/USER:%pcaccount%PATHwin32_terminalservicesettingWHERE(__Class!="")CALLSetAllowTSConnections1
检测是否插入U盘的批处理
@echooff
((wmiclogicaldiskwhere"drivetype=2"getname|find"无可用范例")>nul2>nul)||for/f"skip=1tokens=*delims="%%iin('wmiclogicaldiskwhere"drivetype=2"getname')doechoU盘盘符是%%i
pause
rem查看cpu
wmiccpulistbrief
rem查看物理内存
wmicmemphysicallistbrief
rem查看逻辑内存
wmicmemlogicallistbrief
rem查看缓存内存
wmicmemcachelistbrief
rem查看虚拟内存
wmicpagefilelistbrief
rem查看网卡
wmicniclistbrief
rem查看网络协议
wmicnetprotocallistbrief
【例】将当前系统BIOS,CPU,主板等信息输出到一个HTML网页文件,命令如下:
::得到系统信息.bat,运行bat文件即可
::系统信息输出到HTML文件,查看帮助:wmic/?
::wmic[系统参数名]list[brief|full]/format:hform>|>>[文件名]
wmicbioslistbrief/format:hform>PCinfo.html
wmicbaseboardlistbrief/format:hform>>PCinfo.html
wmiccpulistfull/format:hform>>PCinfo.html
wmicoslistfull/format:hform>>PCinfo.html
wmiccomputersystemlistbrief/format:hform>>PCinfo.html
wmicdiskdrivelistfull/format:hform>>PCinfo.html
wmicmemlogicallistfull/format:hform>>PCinfo.html
PCinfo.html
中国足彩网信息请查看IT技术专栏