WMI and windows Security Center

It may be noted that when no anti-virus software is installed or the anti-virus software is disabled, a bubble will pop up in the windows Security Center to remind users to reduce the chances and risks of computer virus attacks. If you have installed anti-virus software, you will also find corresponding reports in the windows Security Center. When the antivirus software is accidentally disabled or the virus code is not updated for a long time, Windows will pop up and prompt that your computer is at risk. How does anti-virus software register with the windows Security Center?

I am not familiar with windows Security Center and wmi. Let's take a look at the following:

Since Windows XP sp2, Windows provides a "security center" function, including automatic update, anti-virus software, and firewall, which can enhance the security of the system, on the other hand, the security settings are managed in a single interface, greatly reducing manual intervention.

Figure 1 xp security center window

Open the security center of xp and vista respectively, and we can find that the "security center" of Windows Vista is further enhanced than that of Windows XP, with more monitoring functions, introduces new components such as User Account Control and Windows Defender, and integrates Internet security settings.

 

Figure 2. vista security center window

1. Firewall: monitors the system's firewall enabling status. The security center reports normal status as long as the firewall is enabled. By default, the firewall is automatically enabled. If a third-party firewall software is installed, the built-in Windows Firewall must be disabled.

2. Automatic update: monitor the automatic update function. If the automatic update is enabled, the security center reports that it is normal. However, it does not analyze whether all necessary update programs have been installed.

3. Malware Protection: Includes virus protection, spyware protection, and other malware protection. The security center monitors whether anti-virus programs and anti-spyware programs are enabled and whether these tools are updated to the latest status. Windows XP only supports anti-virus programs.

4. Other Security Settings: monitor other security settings of the system, including Internet Security Settings and User Account Control activation.

As for how the security center interacts with users based on various settings and the related settings of the security center, you can perform two more operations to understand it. I will not elaborate on it here.

WMI, Windows Management Instrumentation (Windows Management specifications) is a core Management support technology built in Windows 2000, Windows XP, and Windows Server 2003 operating systems. It is a standard and infrastructure, it allows you to access, configure, manage, and monitor almost all Windows resources.

Before WMI, the only way to access Windows resources programmatically is through the Win32 API. In this case, Windows Administrators cannot use common scripting languages to automate common system management tasks, because most scripting languages cannot directly call Win32 APIs. By providing consistent models and frameworks, WMI changes this situation. Through models and frameworks, all Windows resources are described and disclosed to the outside world. The best thing is that the system administrator can use the WMI script library to create system management scripts to manage any Windows resources exposed Through WMI!

For the windows Security Center, WMI provides the corresponding interface. When installing the anti-virus software, you can use this interface to report some information about your own software to the security center, such as the software name and version, under what circumstances will it expire. When the anti-virus software is disabled or uninstalled, the security center is also notified that it has been disabled. When the security center is running, it will read the corresponding information to interact with users.

What should I consider if I want to test the function of registering a firewall with the security center? It is mainly about the interaction process between the security center and users. First, let's list the following points:

1. After the firewall is installed, the status of the security center firewall column interacts with bubbles when it is enabled;

2. When the firewall expires, the status of the security center firewall column interacts with bubbles;

3. When the firewall is disabled, the status of the security center firewall column interacts with bubbles;

4. After the firewall is uninstalled, the status of the security center firewall column interacts with bubbles;

5. When a restricted user logs on to the system, the status of the security center firewall column interacts with bubbles;

6. When multiple firewall software exist simultaneously, the status of the security center firewall column interacts with bubbles;

7. different operating systems are not supported by systems below XP SP2;

For more information about WMI script, see here: http://www.microsoft.com/china/MSDN/library/enterprisedevelopment/softwaredev/WDdnclinicscripting.mspx? Mfr = true

Vivilisa 05.18.2009