User - property in ROOT\CIMV2\ms_409 namespace

User in other namespaces

List of classes with User local property in ROOT\CIMV2\ms_409 namespace

propertyClassOrigin
UserMsft_ProvidersMsft_Providers
UserMsft_WmiProvider_OperationEventMsft_WmiProvider_OperationEvent
UserWin32_DiskQuotaWin32_DiskQuota
UserWin32_NTLogEventWin32_NTLogEvent
UserWin32_NTLogEventUserWin32_NTLogEventUser
UserWin32_ReliabilityRecordsWin32_ReliabilityRecords
UserWin32_StartupCommandWin32_StartupCommand
UserWin32_TSLicenseReportEntryWin32_TSLicenseReportEntry
UserWin32_TSLicenseReportFailedPerUserEntryWin32_TSLicenseReportFailedPerUserEntry

List of classes with User derived property in ROOT\CIMV2\ms_409 namespace

propertyClassOrigin
UserMsft_WmiProvider_AccessCheck_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_AccessCheck_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_CancelQuery_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_CancelQuery_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ComServerLoadOperationEventMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ComServerLoadOperationFailureEventMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_CreateClassEnumAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_CreateClassEnumAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_CreateInstanceEnumAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_CreateInstanceEnumAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_DeleteClassAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_DeleteClassAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_DeleteInstanceAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_DeleteInstanceAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ExecMethodAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ExecMethodAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ExecQueryAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ExecQueryAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_GetObjectAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_GetObjectAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_InitializationOperationEventMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_InitializationOperationFailureEventMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_LoadOperationEventMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_LoadOperationFailureEventMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_NewQuery_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_NewQuery_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_OperationEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_OperationEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ProvideEvents_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_ProvideEvents_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_PutClassAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_PutClassAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_PutInstanceAsyncEvent_PostMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_PutInstanceAsyncEvent_PreMsft_WmiProvider_OperationEvent
UserMsft_WmiProvider_UnLoadOperationEventMsft_WmiProvider_OperationEvent

Code samples for User property

Get instance of WMI class using GetObject, User property of Win32_NTLogEvent

Short VBS code - get a single specified instance of Win32_NTLogEvent class or get a default unnamed instance (singleton) of the class, using one single command GetObject with exact path of the wmi object.

'https://wutils.com/wmi/
Dim wmiObject
Set wmiObject = GetObject( _
 "WINMGMTS:\\.\ROOT\CIMV2\ms_409:" + _
 "Win32_NTLogEvent.Logfile=""Value"",RecordNumber=Value")
Wscript.Echo wmiObject.User 'or other property name, see properties
See more VBS samples of Win32_NTLogEvent class

WMI query - sample windows WQL with C#, User property of Win32_NTLogEvent

Get a specified instance of Win32_NTLogEvent by a key, get a default unnamed instance (singleton) of the class or list instances of the class by wmi query using this c# sample code.
See in another language: VBScript, VB.Net.
//https://wutils.com/wmi/

//Project -> Add reference -> System.Management
//using System.Management;

//create a management scope object
ManagementScope scope = new ManagementScope("\\\\.\\ROOT\\CIMV2\\ms_409");

//create object query
ObjectQuery query = new ObjectQuery("SELECT * FROM Win32_NTLogEvent");

//create object searcher
ManagementObjectSearcher searcher =
                        new ManagementObjectSearcher(scope, query);

//get a collection of WMI objects
ManagementObjectCollection queryCollection = searcher.Get();

//enumerate the collection.
foreach (ManagementObject m in queryCollection) 
{
  // access properties of the WMI object
  Console.WriteLine("User : {0}", m["User"]);
  
}

WMI query - sample windows WQL with VB.Net, User property of Win32_NTLogEvent

Get a specified instance of Win32_NTLogEvent by a key, get a default unnamed instance (singleton) of the class or list instances of the class by wmi query using this VB.Net sample code.
See in another language: VBScript, C#
'Project -> Add reference -> System.Management
'Imports System.Management

'Get the namespace management scope
Dim Scope As New ManagementScope("\\.\ROOT\CIMV2\ms_409")

'Get a result of WML query 
Dim Query As New ObjectQuery("SELECT * FROM Win32_NTLogEvent")

'Create object searcher
Dim Searcher As New ManagementObjectSearcher(Scope, Query)

'Get a collection of WMI objects
Dim queryCollection As ManagementObjectCollection = Searcher.Get

'Enumerate wmi object 
For Each mObject As ManagementObject In queryCollection
  'write out some property value
  Console.WriteLine("User : {0}", mObject("User"))
Next
comments powered by Disqus
WUtils.com