Simple WMI to Win32_ShadowCopy query fails

[iprob]

I'm doing a very basic script trying to get the shadow copies on the system via WMI. Here is the script:

Dim $objWMI = ObjGet("winmgmts://localhost/root/cimv2")

Dim $objSet = $objWMI.ExecQuery("SELECT * FROM Win32_ShadowCopy")

For $objItem in $objSet

ConsoleWrite($objItem.DeviceObject)

Next

Nothing is returned. When I run the following vbscript, I get the two shadow copies on the system I created listed without a problem.

Dim namespace

Set namespace = GetObject("winmgmts://localhost/root/cimv2")

Dim objSet

Set objSet = namespace.ExecQuery("select * from Win32_ShadowCopy")

Dim dateTime

set dateTime = CreateObject("WbemScripting.SWbemDateTime")

Dim vDate

count = 0

for each obj in objSet

count = count + 1

wscript.echo obj.ID

wscript.echo obj.SetID

wscript.echo obj.ProviderID

wscript.echo obj.Count

wscript.echo obj.DeviceObject

wscript.echo obj.VolumeName

wscript.echo obj.ServiceMachine

wscript.echo obj.ExposedName

wscript.echo obj.State

wscript.echo obj.Persistent

wscript.echo obj.ClientAccessible

wscript.echo obj.NoAutoRelease

wscript.echo obj.NoWriters

wscript.echo obj.Transportable

wscript.echo obj.NotSurfaced

wscript.echo obj.HardwareAssisted

wscript.echo obj.Differential

wscript.echo obj.Plex

wscript.echo obj.Imported

wscript.echo obj.ExposedRemotely

wscript.echo obj.ExposedLocally

dateTime.Value = obj.InstallDate

vDate = dateTime.GetVarDate(True)

wscript.echo vDate

next

Any idea on why my autoit script is not working? I should also add that when I ran "vssadmin list shadows" using the Run() function it returns an error (class not registered) but when I run it from the command line it works fine. I also queried other WMI classes and there were no problems.

Rob

Edited June 28, 2011 by iprob

[guinness]

Have you tried looking at Scriptomatic (Examples Forum) to see how the code should look?!

[iprob]

Have you tried looking at Scriptomatic (Examples Forum) to see how the code should look?!

The scriptomatic shows the same query I have and gets the same results, nothing. Using other WMI classes works fine. It seems to be an issue with autoit interacting with the Win32_ShadowCopy class but I don't know what that would be.

Rob

[guinness]

Perhaps the code you used?! I used this and it worked >>

expandcollapse popup

; Generated by AutoIt Scriptomatic

$wbemFlagReturnImmediately = 0x10
$wbemFlagForwardOnly = 0x20
$colItems = ""
$strComputer = "localhost"

$Output=""
$Output = $Output & "Computer: " & $strComputer  & @CRLF
$Output = $Output & "==========================================" & @CRLF
$objWMIService = ObjGet("winmgmts:\\" & $strComputer & "\root\CIMV2")
$colItems = $objWMIService.ExecQuery("SELECT * FROM Win32_ShadowCopy", "WQL", _
                                          $wbemFlagReturnImmediately + $wbemFlagForwardOnly)

If IsObj($colItems) then
   For $objItem In $colItems
      $Output = $Output & "Caption: " & $objItem.Caption & @CRLF
      $Output = $Output & "ClientAccessible: " & $objItem.ClientAccessible & @CRLF
      $Output = $Output & "Count: " & $objItem.Count & @CRLF
      $Output = $Output & "Description: " & $objItem.Description & @CRLF
      $Output = $Output & "DeviceObject: " & $objItem.DeviceObject & @CRLF
      $Output = $Output & "Differential: " & $objItem.Differential & @CRLF
      $Output = $Output & "ExposedLocally: " & $objItem.ExposedLocally & @CRLF
      $Output = $Output & "ExposedName: " & $objItem.ExposedName & @CRLF
      $Output = $Output & "ExposedPath: " & $objItem.ExposedPath & @CRLF
      $Output = $Output & "ExposedRemotely: " & $objItem.ExposedRemotely & @CRLF
      $Output = $Output & "HardwareAssisted: " & $objItem.HardwareAssisted & @CRLF
      $Output = $Output & "ID: " & $objItem.ID & @CRLF
      $Output = $Output & "Imported: " & $objItem.Imported & @CRLF
      $Output = $Output & "InstallDate: " & WMIDateStringToDate($objItem.InstallDate) & @CRLF
      $Output = $Output & "Name: " & $objItem.Name & @CRLF
      $Output = $Output & "NoAutoRelease: " & $objItem.NoAutoRelease & @CRLF
      $Output = $Output & "NotSurfaced: " & $objItem.NotSurfaced & @CRLF
      $Output = $Output & "NoWriters: " & $objItem.NoWriters & @CRLF
      $Output = $Output & "OriginatingMachine: " & $objItem.OriginatingMachine & @CRLF
      $Output = $Output & "Persistent: " & $objItem.Persistent & @CRLF
      $Output = $Output & "Plex: " & $objItem.Plex & @CRLF
      $Output = $Output & "ProviderID: " & $objItem.ProviderID & @CRLF
      $Output = $Output & "ServiceMachine: " & $objItem.ServiceMachine & @CRLF
      $Output = $Output & "SetID: " & $objItem.SetID & @CRLF
      $Output = $Output & "State: " & $objItem.State & @CRLF
      $Output = $Output & "Status: " & $objItem.Status & @CRLF
      $Output = $Output & "Transportable: " & $objItem.Transportable & @CRLF
      $Output = $Output & "VolumeName: " & $objItem.VolumeName & @CRLF
      if Msgbox(1,"WMI Output",$Output) = 2 then ExitLoop
      $Output=""
   Next
Else
   Msgbox(0,"WMI Output","No WMI Objects Found for class: " & "Win32_ShadowCopy" )
Endif


Func WMIDateStringToDate($dtmDate)

    Return (StringMid($dtmDate, 5, 2) & "/" & _
    StringMid($dtmDate, 7, 2) & "/" & StringLeft($dtmDate, 4) _
    & " " & StringMid($dtmDate, 9, 2) & ":" & StringMid($dtmDate, 11, 2) & ":" & StringMid($dtmDate,13, 2))
EndFunc

[BrewManNH]

I tried Scriptomatic as well and got nothing from Win32_ShadowCopy, yet the VBScript worked fine. I'm running them both on Windows 7 x86 Enterprise edition.

[iprob]

I tested your code and the code generated by Scriptomatic. Neither work on my test systems (multiple machines). I'm running this on Windows 7 and Server 2008 R2. It doesn't work on either of those operating systems. And yes, I've tested without UAC to make sure it wasn't a permissions issue. The VBScript code and vssadmin via command line work fine.

What operating system are you using?

Rob

[guinness]

I tested on Windows 7 x64 and the MsgBox() showed for me.

[iprob]

I tested on Windows 7 x64 and the MsgBox() showed for me.

I think the issue is what version of autoit you are running. I found this article (http://technet.microsoft.com/en-us/library/ee264219(WS.10).aspx) which seems to indicate that there is an issue if you are running 32-bit version applications on a 64-bit machine. The odd thing is that when I check my processes, the application running is aut2exe_x64.exe.

What process do you show running when you are executing autoit?

Rob

[iprob]

I think the issue is what version of autoit you are running. I found this article (http://technet.microsoft.com/en-us/library/ee264219(WS.10).aspx) which seems to indicate that there is an issue if you are running 32-bit version applications on a 64-bit machine. The odd thing is that when I check my processes, the application running is aut2exe_x64.exe.

What process do you show running when you are executing autoit?

Rob

That resolved it. The script editor is a 32-bit application (not the aut2exe thing, looked at wrong process) and was attempting to run the query in 32-bit mode. Compiled as a 64-bit application and query works.

Rob