// RegKeyToMOF by Mark Cochrane (with help from Skissinger, SteveRac, Jonas Hettich, Kent Agerlund & Barker) // this section tells the inventory agent what to collect // 5/26/2017 10:55:26 AM #pragma namespace ("\\\\.\\root\\cimv2") #pragma deleteclass("Winlogon", NOFAIL) [DYNPROPS] Class Winlogon { [key] string KeyName; String ReportBootOk; String Shell; String PreCreateKnownFolders; String Userinit; String VMApplet; Uint32 AutoRestartShell; String Background; String CachedLogonsCount; String DebugServerCommand; Uint32 ForceUnlockLogon; String LegalNoticeCaption; String LegalNoticeText; Uint32 PasswordExpiryWarning; String PowerdownAfterShutdown; String ShutdownWithoutLogon; String WinStationsDisabled; Uint32 DisableCAD; String scremoveoption; Uint32 ShutdownFlags; Uint32 AutoLogonCount; String AutoAdminLogon; }; [DYNPROPS] Instance of Winlogon { KeyName="RegKeyToMOF_32"; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ReportBootOk"),Dynamic,Provider("RegPropProv")] ReportBootOk; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|Shell"),Dynamic,Provider("RegPropProv")] Shell; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|PreCreateKnownFolders"),Dynamic,Provider("RegPropProv")] PreCreateKnownFolders; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|Userinit"),Dynamic,Provider("RegPropProv")] Userinit; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|VMApplet"),Dynamic,Provider("RegPropProv")] VMApplet; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|AutoRestartShell"),Dynamic,Provider("RegPropProv")] AutoRestartShell; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|Background"),Dynamic,Provider("RegPropProv")] Background; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|CachedLogonsCount"),Dynamic,Provider("RegPropProv")] CachedLogonsCount; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|DebugServerCommand"),Dynamic,Provider("RegPropProv")] DebugServerCommand; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ForceUnlockLogon"),Dynamic,Provider("RegPropProv")] ForceUnlockLogon; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|LegalNoticeCaption"),Dynamic,Provider("RegPropProv")] LegalNoticeCaption; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|LegalNoticeText"),Dynamic,Provider("RegPropProv")] LegalNoticeText; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|PasswordExpiryWarning"),Dynamic,Provider("RegPropProv")] PasswordExpiryWarning; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|PowerdownAfterShutdown"),Dynamic,Provider("RegPropProv")] PowerdownAfterShutdown; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ShutdownWithoutLogon"),Dynamic,Provider("RegPropProv")] ShutdownWithoutLogon; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|WinStationsDisabled"),Dynamic,Provider("RegPropProv")] WinStationsDisabled; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|DisableCAD"),Dynamic,Provider("RegPropProv")] DisableCAD; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|scremoveoption"),Dynamic,Provider("RegPropProv")] scremoveoption; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ShutdownFlags"),Dynamic,Provider("RegPropProv")] ShutdownFlags; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|AutoLogonCount"),Dynamic,Provider("RegPropProv")] AutoLogonCount; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|AutoAdminLogon"),Dynamic,Provider("RegPropProv")] AutoAdminLogon; }; #pragma namespace ("\\\\.\\root\\cimv2") #pragma deleteclass("Winlogon_64", NOFAIL) [DYNPROPS] Class Winlogon_64 { [key] string KeyName; String ReportBootOk; String Shell; String PreCreateKnownFolders; String Userinit; String VMApplet; Uint32 AutoRestartShell; String Background; String CachedLogonsCount; String DebugServerCommand; Uint32 ForceUnlockLogon; String LegalNoticeCaption; String LegalNoticeText; Uint32 PasswordExpiryWarning; String PowerdownAfterShutdown; String ShutdownWithoutLogon; String WinStationsDisabled; Uint32 DisableCAD; String scremoveoption; Uint32 ShutdownFlags; Uint32 AutoLogonCount; String AutoAdminLogon; }; [DYNPROPS] Instance of Winlogon_64 { KeyName="RegKeyToMOF_64"; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ReportBootOk"),Dynamic,Provider("RegPropProv")] ReportBootOk; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|Shell"),Dynamic,Provider("RegPropProv")] Shell; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|PreCreateKnownFolders"),Dynamic,Provider("RegPropProv")] PreCreateKnownFolders; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|Userinit"),Dynamic,Provider("RegPropProv")] Userinit; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|VMApplet"),Dynamic,Provider("RegPropProv")] VMApplet; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|AutoRestartShell"),Dynamic,Provider("RegPropProv")] AutoRestartShell; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|Background"),Dynamic,Provider("RegPropProv")] Background; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|CachedLogonsCount"),Dynamic,Provider("RegPropProv")] CachedLogonsCount; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|DebugServerCommand"),Dynamic,Provider("RegPropProv")] DebugServerCommand; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ForceUnlockLogon"),Dynamic,Provider("RegPropProv")] ForceUnlockLogon; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|LegalNoticeCaption"),Dynamic,Provider("RegPropProv")] LegalNoticeCaption; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|LegalNoticeText"),Dynamic,Provider("RegPropProv")] LegalNoticeText; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|PasswordExpiryWarning"),Dynamic,Provider("RegPropProv")] PasswordExpiryWarning; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|PowerdownAfterShutdown"),Dynamic,Provider("RegPropProv")] PowerdownAfterShutdown; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ShutdownWithoutLogon"),Dynamic,Provider("RegPropProv")] ShutdownWithoutLogon; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|WinStationsDisabled"),Dynamic,Provider("RegPropProv")] WinStationsDisabled; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|DisableCAD"),Dynamic,Provider("RegPropProv")] DisableCAD; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|scremoveoption"),Dynamic,Provider("RegPropProv")] scremoveoption; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|ShutdownFlags"),Dynamic,Provider("RegPropProv")] ShutdownFlags; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|AutoLogonCount"),Dynamic,Provider("RegPropProv")] AutoLogonCount; [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon|AutoAdminLogon"),Dynamic,Provider("RegPropProv")] AutoAdminLogon; };