The purpose of the script is to look through the System Event Log. This
particular example will count how many EventCode entries there are for
Unexpected shutdowns.
File (menu), Save as Shutdown.vbs Note: Omitting the .vbs extension, this
is where people go wrong.
Double click Shutdown.vbs
Wait 30 seconds and check the Windows Scripting Host flashing in the
navigation area.
'VBScript 'Purpose of script to query System log for Unexpected
shutdowns
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colLoggedEvents = objWMIService.ExecQuery _
("Select * from Win32_NTLogEvent Where Logfile = 'System' and " _
& "EventCode = '6008'")
Wscript.Echo "Unexpected shutdowns: " & colLoggedEvents.Count
Learning points
strComputer = "." set the script to query the current machine
Set ObjWMIService tell the script to use WMI as opposed the ADSI.
Here is the crucial line Logfile = 'System' and " _
& "EventCode = '6008'"
Wscript.Echo calls for a message box to display the results.
Guy
Recommends: Permissions Analyzer - Free Active Directory Tool
I like the
Permissions Monitor because it enables me to see quickly WHO has permissions
to do WHAT. When you launch this tool it analyzes a users effective NTFS
permissions for a specific file or folder, takes into account network share
access, then displays the results in a nifty desktop dashboard!
Think of all the frustration that this free utility saves when you are
troubleshooting authorization problems for users access to a resource.
Windows Management Instrumentation (WMI) is one of the hidden
treasures of Microsoft operating systems.
Fortunately, Solarwinds
have created the
Free WMI Monitor so that you can actually see and understand these gems of
performance information. Take the guess work out of which
WMI counters to use for applications like Microsoft Active Directory,
SQL or Exchange Server.
