??? 通過查找相關資料，總結了一下python用WMI等獲取windows系統信息以及修改系統的相關配置，代碼如下(附件中有本代碼附件)：

#-*- coding:utf-8 -*-

import time
import datetime
import re
import subprocess
import sys
import wmi
import os
import ConfigParser
import _winreg
import win32net
import win32api
import win32con
import win32netcon
import win32security

#DEBUG=True
#DEBUG=False
#LOGFILE=r'c:\win.log'
TIME_FORMAT=r'%Y-%m-%d %H:%M:%S'

#c=wmi.WMI(privileges=["Admin","Shutdown","Security"])

#實例化wmi類
c=wmi.WMI()

#定義myWmi類并返回實例化對象
class myWmi(object):
??? #定義構造器
??? def __init__(self,wmiclass,info={},name=""):
??????? if name:
??????????? self.obj=wmiclass(Name=name)
??????? else:
??????????? self.obj=wmiclass()
??????? self.info=info
??????? return self.obj

#定義myOs類用于系統信息查詢及設置
class myOs(object):
??? #定義構造器
??? def __init__(self,wmiobj=c,info={}):
??????? #創建wmi實例
??????? self.obj=wmiobj.Win32_OperatingSystem()[0]????????????????????????????????????????? #用于獲取計算機運行環境信息
??????? self.cobj=wmiobj.Win32_ComputerSystem()[0]????????????????????????????????????????? #用于獲取計算機CPU數量,內存大小,主板相關信息
??????? self.disk_obj= wmiobj.Win32_DiskDrive()???????????????????????????????????????????? #用于獲取硬盤相關信息
??????? self.Partition_obj= wmiobj.Win32_LogicalDisk()????????????????????????????????????? #用于獲取分區相關信息
??????? self.networkAdapter_obj = wmiobj.Win32_NetworkAdapterConfiguration (IPEnabled=1)??? #用于配置及獲取網絡連接相關信息
??????? self.process_obj = wmiobj.Win32_Processor()[0]????????????????????????????????????? #用于獲取CPU詳細信息
??????? self.update_obj = wmiobj.Win32_QuickFixEngineering()??????????????????????????????? #用于獲取windows更新補丁相關信息
??????? self.info=info????????????????????????????????????????????????????????????????????? #定義用于存放配置信息的字典

??? def get_os_info(self):
??????? """
??????????????????? 返回系統相關信息
??????? """
??????? self.info["os"]=self.obj.Caption???????????????????????????????????????????????????????????????????????????????????????? #獲取系統版本
??????? self.info["version"]=self.obj.CSDVersion???????????????????????????????????????????????????????????????????????????????? #操作系統更新版本
??????? self.info["fullname"]=self.obj.CSName??????????????????????????????????????????????????????????????????????????????????? #獲取計算機名
??????? self.info["localtime"]=datetime.datetime.strptime(str(str(self.obj.LocalDateTime ).split('.')[0]),'%Y%m%d%H%M%S')??????? #獲取系統本地時間
??????? self.info["lastboottime"]=datetime.datetime.strptime(str(str(self.obj.LastBootUpTime ).split('.')[0]),'%Y%m%d%H%M%S')??? #獲取系統上次啟動時間
??????? self.info["os_architecture"]=self.obj.OSArchitecture???????????????????????????????????????????????????????????????????? #獲取操作系統類型(32bit/64bit)
??????? self.info["mu_languages"]=self.obj.MUILanguages[0]?????????????????????????????????????????????????????????????????????? #獲取操作系統語言版本
??????? self.info["SerialNumber"]=self.obj.SerialNumber????????????????????????????????????????????????????????????????????????? #獲取操作系統序列號
??????? self.info["cpu_count"]=self.cobj.NumberOfProcessors????????????????????????????????????????????????????????????????????? #獲取cpu數量
??????? self.info["mainboard"]=self.cobj.Manufacturer??????????????????????????????????????????????????????????????????????????? #獲取主板廠商信息
??????? self.info["board_model"]=self.cobj.Model???????????????????????????????????????????????????????????????????????????????? #獲取主板型號
??????? self.info["systemtype"]=self.cobj.SystemType???????????????????????????????????????????????????????????????????????????? #獲取主板架構類型
??????? self.info["physical_memory"]=int(self.cobj.TotalPhysicalMemory)/1024/1024??????????????????????????????????????????????? #獲取內存容量
??????? self.info["cpu_name"] = self.process_obj.Name??????????????????????????????????????????????????????????????????????????? #獲取cpu類型
??????? self.info["clock_speed"] = self.process_obj.MaxClockSpeed??????????????????????????????????????????????????????????????? #獲取操作系統主頻
??????? self.info["number_core"] = self.process_obj.NumberOfCores??????????????????????????????????????????????????????????????? #獲取核心數量
??????? self.info["data_width"] = self.process_obj.DataWidth???????????????????????????????????????????????????????????????????? #獲取計算機的CPU數據寬度
??????? self.info["socket_desigination"] = self.process_obj.SocketDesignation??????????????????????????????????????????????????? #獲取主板cpu接口類型
??????? self.info["l2_cache"] = self.process_obj.L2CacheSize???????????????????????????????????????????????????????????????????? #獲取cpu二級緩存大小
??????? self.info["l3_cache"] = self.process_obj.L3CacheSize???????????????????????????????????????????????????????????????????? #獲取cpu三級緩存大小
??????? return self.info

??? #打印補丁更新信息
??? def update_information(self):
??????? output=open(log_path,"a+")
??????? output.write('\n')
??????? output.write('[Update information]\r\n')
??????? for s in self.update_obj:
??????????? output.write('%-10s %-10s %-20s %-10s\n' %(s.HotFixID,s.InstalledOn,s.Description,s.InstalledBy))
??????? output.write('\n')
??? #打印磁盤信息
??? def get_diskinfo(self):
??????? for item in self.disk_obj:
??????????? output=open(log_path,"a+")
??????????? output.write('\n')
??????????? output.write('[disk info]\r\n')
??????????? for item in self.disk_obj:
??????????????? output.write('%-25s Partition: %-3s SN: %-30s %-3sG\n' %(item.Caption,str(item.Partitions),item.SerialNumber,str(int(item.Size)/1024/1024/1024)))
??????????????? #output.write('%-30s Partition: %-5s SN: %-30s %-10s G\n' %(item.Caption,str(item.Partitions),item.SerialNumber,str((item.Size)/1024/1024/1024)))
??????????????? output.write('\n')
??????????? break

??? #打印磁盤分區信息
??? def get_partitioninfo(self):
??????? Partition_count = len(self.Partition_obj)
??????? output=open(log_path,"a+")
??????? output.write('\n')
??????? output.write('[Partition info]\r\n')
??????? output.write('\r\n')
??????? for x in range(len(self.Partition_obj)):
??????????????? if self.Partition_obj[x].DriveType == 3:
??????????????????? output.write('DeviceID = %-4s FileSystem = %-5s TotalSize = %-1sG??? FreeSpace = %-1sG\n' %(self.Partition_obj[x].DeviceID,self.Partition_obj[x].FileSystem,str(int(self.Partition_obj[x].Size)/1024/1024/1024),str(int(self.Partition_obj[x].FreeSpace)/1024/1024/1024)))
??????????????????? output.write('\n')

??? #打印網絡配置信息
??? def get_networkadapter(self):
??????? output=open(log_path,"a+")
??????? output.write('\n')
??????? output.write('[network info]\r\n')
??????? for interface in self.networkAdapter_obj:
??????????? output.write('IP Address:? %-10s\n' %interface.IPAddress[0])
??????????? output.write('NET Mask:??? %-10s\n' %interface.IPSubnet[0])
??????????? output.write('Gateway:???? %-10s\n' %interface.DefaultIPGateway)
??????????? output.write('Pri DNS:???? %-10s\n' %str(interface.DNSServerSearchOrder[0]))
??????????? output.write('Sec DNS:???? %-10s\n' %str(interface.DNSServerSearchOrder[1]))
??????????? output.write('Real Mac:??? %-10s\n' %interface.MACAddress)
??????????? output.write('\n')
??????????? break

??? #強制關機
??? def win32shutdown(self):
??????? self.obj.Win32Shutdown()

??? #重啟操作系統
??? def reboot(self):
??????? self.obj.Reboot()

??? #關閉操作系統
??? def shutdown(self):
??????? self.obj.Shutdown()

#定義network_config類用于網絡設置信息查詢及設置
class network_config(object):
??? #定義構造器
??? def __init__(self,wmiobj=c):
??????? #實例化對象
??????? self.obj = wmiobj.Win32_NetworkAdapterConfiguration

??? #設置LMHOSTS
??? def config_setup(self):
??????? self.obj.EnableWINS(WINSEnableLMHostsLookup=False)

??? #設置dns
??? def tcp_config(self):

??????? interfaces = c.Win32_NetworkAdapterConfiguration(IPEnabled=True)
??????? device_count = len(interfaces)
??????? start_num = 0
??????? dns = ['202.106.196.115','202.106.0.20']
??????? while True:
??????????? for first_if in interfaces:
??????????????? dns_result = first_if.SetDNSServerSearchOrder(DNSServerSearchOrder = dns)
??????????????? netbios_result = first_if.SetTcpipNetbios(TcpipNetbiosOptions = 2)
??????????????? start_num += 1
??????????????? if start_num > device_count:
??????????????????? break
??????????? return dns_result,netbios_result

#############################
#?????????????????????????? #
#?? Service???????????????? #
#?????????????????????????? #
#############################

#定于myService()類用于系統服務檢查及設置
class myService(object):
??? """
??? control system service
??? """
??? #定義構造器
??? def __init__(self,name="",wmiobj=c,**kargs):
??????? self.name=name
??????? kargs={}
??????? args=""
??????? if self.name:
??????????? self.obj=wmiobj.Win32_Service(Name=self.name)[0]??? #obj in the list
??????? elif kargs:
??????????? for key in kargs:
??????????????? args+=key+'='+'"'+kargs[key]+'"'+','
??????????? args=args[:-1]
??????????? cmd="wmiobj.Win32_Service("+args+")"
??????????? self.obj=eval(cmd)
??????? else:
??????????? self.obj=wmiobj.Win32_Service()

??? def get_service_info(self):
??????? service_list=[]
??????? for ser in self.obj:
??????????? service_dict={}
??????????? service_dict["name"]=ser.Name
??????????? service_dict["displayname"]=ser.Caption
??????????? service_dict["pid"]=ser.ProcessID
??????????? service_dict["stat"]=ser.State
??????????? service_dict["startmode"]=ser.StartMode
??????????? service_list.append(service_dict)
??????? return service_list

??? #獲取系統服務狀態
??? def status(self):
??????? return self.obj.State

??? #啟動服務
??? def start(self):
??????? self.obj.StartService()

??? #停止服務
??? def stop(self):
??????? self.obj.StopService()

??? #關閉黑名單中系統服務
??? def change_mode(self,mode):
??????? blacklist_path = sys.path[0]+'/data/svr_blacklist.txt'
??????? f=open(blacklist_path)
??????? svr_blacklist = f.readlines()
??????? f.close()

??????? for b in svr_blacklist:
??????????? b = b.strip()
??????????? for s in self.obj:
??????????????? if? b in s.Name:
??????????????????? """
??????????????????? Three mode available: Auto, Manual and Disabled
??????????????????? """
??????????????????? s.ChangeStartMode(mode)
??????????????? else:
??????????????????? continue
??????????? break
??????? #obj.ChangeStartMode(mode)

??? #刪除系統服務
??? def delete(self):
??????? print "You should not delete a service, stop it instead."

#############################
#?????????????????????????? #
#?? Process???????????????? #
#?????????????????????????? #
#############################
#定義myProcess類用于進程查看
class myProcess(myWmi):
??? def __init__(self,name=""):
??????? self.name=name
??????? myWmi.__init__(self,c.Win32_Process,name=self.name)

??? def get_process_info(self):
??????? processlist=[]
??????? for process in self.obj:
??????????? processlist.append((process.ProcessID,process.Name,process.CreationDate,process.ExecutablePath,process.Caption))
??????? return processlist

??? def get_process_owner(self):
??????? return self.obj[0].GetOwner()

??? def terminate(self):
??????? self.obj[0].Terminate()

#############################
#?????????????????????????? #
#?? Software??????????????? #
#?????????????????????????? #
#############################
#定義mySoft類用于安裝軟件檢查
class mySoft(myWmi):
??? def __init__(self,name=""):
??????? self.name=name
??????? myWmi.__init__(self,c.Win32_Product,name=self.name)

??? def get_software(self):
??????? softlist=[]
??????? for soft in self.obj:
??????????? softlist.append((soft.Name,soft.InstallDate))
??????? return softlist

??? def uninstall(self):
??????? #self.obj[0].Uninstall()
??????? pass

#############################
#?????????????????????????? #
#????? User and Group?????? #
#?????????????????????????? #
#############################
'''
def dump(dict):
??? for key,value in dict.items():
??????? print key,"=",str(value)'''

#定義myAccount類用于帳號檢查及設置
class myAccount(myWmi):
??? #類構造器
??? def __init__(self,name="",group=""):
??????? self.uname=name
??????? self.gname=group
??????? self.uobj=myWmi.__init__(self,c.Win32_UserAccount,name=self.uname)
??????? self.guobj=myWmi.__init__(self,c.Win32_GroupUser,name=self.gname)
?? #返回賬戶列表
??? def show_user_list(self):
??????? ulist=[]
??????? for user in self.uobj:
??????????? ulist.append(user.Name)
??????? return ulist
??? #返回禁用的賬戶列表
??? def show_user_info(self,username):
??????? info=win32net.NetUserGetInfo(None,username,3)

??????? info["disabled"]=user.Disabled????? #Disabled is true means the account is disabled.
??????? info["status"]=user.Status
??????? return ulist
??? #返回用戶組
??? def show_user_in_group(self):
??????? gulist={}
??????? for gu in self.guobj:
??????????? if gu.GroupComponent.Name not in gulist:
??????????????? gulist[gu.GroupComponent.Name]=[gu.PartComponent.Name]
??????????? else:
??????????????? gulist[gu.GroupComponent.Name].append(gu.PartComponent.Name)
??????? return gulist
??? #返回管理員用戶列表
??? def show_userlist_admin(self):
??????? uresume = 0
??????? while True:
??????????? admin_list = []
??????????? users, total, uresume = win32net.NetLocalGroupGetMembers (None, 'Administrators', 0, uresume)
??????????? for sid in (u['sid'] for u in users):
??????????????? username, domain, type = win32security.LookupAccountSid (None, sid)
??????????????? admin_list.append(username)
??????????? return admin_list
??????????? if uresume == 0:
??????????????? break
??? #獲取當前用戶
??? def get_current_user(self):
??????? return win32api.GetUserName()
??? #刪除用戶
??? def delete_user(self,username):
??????? win32net.NetUserDel(None,username)
??? #添加用戶
??? def add_user(self,name,passwd,flags=win32netcon.UF_NORMAL_ACCOUNT|win32netcon.UF_SCRIPT,privileges=win32netcon.USER_PRIV_ADMIN):
??????? udata={}??? #user info dict, can be gotten by win32net.NetUserGetInfo
??????? udata["name"]=name
??????? udata["password"]=passwd
??????? udata["flags"]=flags
??????? udata["priv"]=privileges
??????? win32net.NetUserAdd(None, 1, udata)
?? #設置用戶信息
??? def modify_user(self,username,udict,level=2):
??????? win32net.NetUserSetInfo(None,username,level,udict)
??? #修改用戶密碼
??? def change_passwd(self,username,oldpass,newpass):
??????? win32net.NetUserChangePassword(None,username,oldpass,newpass)

??? #重命名賬戶
??? def rename_user(self,oldname,newname):
??????? for item in self.uobj:
??????????? if oldname in item.id:
??????????????? item.Rename('admin')
??????????? else:
??????????????? continue

#############################
#?????????????????????????? #
#?? Registry??????????????? #
#?????????????????????????? #
#############################

#定義myRegistry類用于注冊表項目檢查及設置
class myRegistry(object):
??? """
??? #print myRegistry().get_value(win32con.HKEY_LOCAL_MACHINE,r'SAM\SAM\Domains\Account\Users','Names')
??? #myRegistry().add_key(_winreg.HKEY_LOCAL_MACHINE,'SOFTWARE\TJTG')
??? #print myRegistry().list_keys(_winreg.HKEY_LOCAL_MACHINE,r'SAM\SAM\Domains\Account\Users\Names')
??? #myRegistry().add_value(_winreg.HKEY_LOCAL_MACHINE,'SOFTWARE\TJTG','AtionName','TJ7PP')
??? #myRegistry().delete_value(_winreg.HKEY_LOCAL_MACHINE,'SOFTWARE\TJTG','AtionName')
??? #myRegistry().delete_key(_winreg.HKEY_LOCAL_MACHINE,'SOFTWARE\TJTG')
??? #print myRegistry().get_value(_winreg.HKEY_LOCAL_MACHINE,r'SOFTWARE\Tracker Software\pdfxctrl.PdfPrinterPreferences','XCL_PATH')
??? """
??? #定義構造函數
??? def __init__(self):
??????? #self.obj=wmi.Registry()
??????? self.obj=wmi.WMI(namespace='DEFAULT').StdRegProv

??? #列出注冊表項
??? def list_keys(self,root,subkey):
??????? result,names=self.obj.EnumKey(hDefKey=root,sSubKeyName=subkey)
??????? if result == 2:
??????????? print "No such keys"
??????? return names

??? #返回對應注冊表項鍵值
??? def get_value(self,root,subkey,valuename,type="string"):
??????? if type == "string":
??????????? result,value = self.obj.GetExpandedStringValue(hDefKey=root,sSubKeyName=subkey,sValueName=valuename)
??????? elif type == "dword":
??????????? result,value = self.obj.GetDWORDValue(hDefKey=root,sSubKeyName=subkey,sValueName=valuename)
??????? else:
??????????? result,value = self.obj.GetBinaryValue(hDefKey=root,sSubKeyName=subkey,sValueName=valuename)
??????? return value

??? #添加注冊表項
??? def add_key(self,root,subkey):
??????? return self.obj.CreateKey(hDefKey=root,sSubKeyName=subkey)

??? #old value can be overwritten
??? #設置鍵值
??? def set_value(self,root,subkey,valuename,value,type):
??????????? if type == "string":
??????????????????? value = self.obj.SetStringValue(hDefKey=root,sSubKeyName=subkey,sValueName=valuename,sValue=value)
??????????? else:
??????????????????? value = self.obj.SetDWORDValue(hDefKey=root,sSubKeyName=subkey,sValueName=valuename,uValue=value)
??????????? return value
??? #刪除注冊表項
??? def delete_key(self,root,subkey):
??????? return self.obj.DeleteKey(root,subkey)
??? #刪除鍵值
??? def delete_value(self,root,subkey,valuename):
??????? return self.obj.DeleteValue(root,subkey,valuename)

#獲取注冊表中用戶列表
def get_sys_sid():
??? reg_user_list = myRegistry().list_keys(_winreg.HKEY_LOCAL_MACHINE,r'SAM\SAM\Domains\Account\Users')
??? sid_admin = u'000001F4'
??? reg_user_list.remove(sid_admin)
??? length =len(reg_user_list)
??? key_list = []
??? raw_pattern = re.compile(r'^00000')
??? n = 0
??? while True:
??????? for m in reg_user_list:
??????????? if raw_pattern.match(m):
??????????????? n += 1
??????????????? if n < length:
??????????????????? key_list.append(m)
??????????????? else:
??????????????????? break
??????? break
??? return key_list

#檢查克隆賬戶
def chk_clone_account():
??? a = get_sys_sid()
??? sid_value = myRegistry().get_value(_winreg.HKEY_LOCAL_MACHINE, r'SAM\SAM\Domains\Account\Users\000001F4', r'F','')
??? #print sid_value
??? #檢查SID值是否為管理員SID值
??? for each_value in a:
??????? path = 'SAM\SAM\Domains\Account\Users\\'+ each_value
??????? key_value = myRegistry().get_value(_winreg.HKEY_LOCAL_MACHINE,path, r'F','')
??????? if sid_value == key_value:
??????????? #print 'Clone Account SID is %s' %each_value
??????????? return True
??????? else:
??????????? continue
??? #檢查注冊表項中是否有隱藏帳號
??? reg_user_list=myRegistry().list_keys(_winreg.HKEY_LOCAL_MACHINE,r'SAM\SAM\Domains\Account\Users\Names')

??? ulist = myAccount().show_user_list()
??? for user in reg_user_list:
??????? if user not in ulist:
??????????? #print 'Clone Account is %s' %user
??????????? return True

#############################
#?????????????????????????? #
#??????? Win_Base_setup???? #
#?????????????????????????? #
#############################
#定義win_Base類用于系統基本配置
class win_Base():
??? #實例化
??? def __init__(self):

??????? #?????ﾩW??????
??????? self.cf=ConfigParser.ConfigParser()
??????? self.cf.read(sys.path[0]+'/data/win_reg.ini')

??? #根據win_reg.ini中讀取到的配置選項,修改對應注冊表項及對應鍵值
??? def win_setup(self):

??????? #???????ﾩW??
??????? section_start = 0
??????? section_count = len(self.cf.sections())
??????? section_item = self.cf.sections()
??????? for user in section_item:
??????????? while True:
??????????????? for user in section_item:

??????????????????? #?????ﾩW???ﾩW??????????
??????????????????? name = self.cf.get(user,"root")
??????????????????? subkey = self.cf.get(user,"sub_key")
??????????????????? valuename = self.cf.get(user,"value_name")
??????????????????? regtype = self.cf.get(user,"reg_type")
??????????????????? #???????ﾡ￪????
??????????????????? if name == 'HKEY_LOCAL_MACHINE':
??????????????????????? a = _winreg.HKEY_LOCAL_MACHINE
??????????????????? elif name == 'HKEY_CLASSES_ROOT':
??????????????????????? a = _winreg.HKEY_CLASSES_ROOT
??????????????????? elif name == 'HKEY_CURRENT_USER':
??????????????????????????? a = _winreg.HKEY_CURRENT_USER
??????????????????? else:
??????????????????????? return name
??????????????????? #??????????
??????????????????? if regtype == "dword":
??????????????????????? value = int(self.cf.get(user,"value"))
??????????????????? else:
??????????????????????? value = self.cf.get(user,"value")
??????????????????? #???????ﾡ￪????

??????????????????? myRegistry().add_key(a,subkey)

??????????????????? myRegistry().set_value(a,subkey,valuename,value,regtype)

??????????????????? section_start += 1
??????????????????? if section_start == section_count:
??????????????????????? break

#############################
#?????????????????????????? #
#?? Startup???????????????? #
#?????????????????????????? #
#############################

#定義show_startupcommand類用于系統啟動項目檢查
def show_startupcommand():
??? startup_list=[]
??? obj=c.Win32_StartupCommand()
??? for s in obj:
??????? startup_info = {}
??????? startup_info['Name'] = s.Name
??????? startup_info['Command'] = s.Command
??????? #startup_info['Location'] = s.Location
??????? #startup_info['User'] = s.User
??????? startup_list.append(startup_info)
??????? #if s.Command not in startup_list:
??????? #??? start_value = s.Command + ' ' + s.Location
??????? #??? startup_list.append((start_value))
??? return startup_list
??? '''startup_list=[]
??? obj=c.Win32_StartupCommand()
??? for s in obj:
??????? if s.Command not in startup_list:
??????????? start_value = s.Command + ' ' + s.Location
??????????? startup_list.append((start_value))
??? return startup_list'''

#############################
#?????????????????????????? #
#?? Audit Log?????????????? #
#?????????????????????????? #
#############################
def reg(string):
??? """
instance of Win32_NTLogEvent
{
??? Category = 9;
??? CategoryString = "Account Logon";
??? ComputerName = "MICROSOF-5524EC";
??? EventCode = 680;
??? EventIdentifier = 680;
??? EventType = 5;
??? InsertionStrings = {"MICROSOFT_AUTHENTICATION_PACKAGE_V1_0", "joe", "MICROSOF-5524EC", "0xC000006A"};
??? Logfile = "Security";
??? Message = "Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
\n
\nLogon account:? joe
\n
\nSource Workstation: MICROSOF-5524EC
\n
\nError Code: 0xC000006A
\n
\n";
??? RecordNumber = 16267;
??? SourceName = "Security";
??? TimeGenerated = "20100424000915.000000+480";
??? TimeWritten = "20100424000915.000000+480";
??? Type = "audit failure";
??? User = "NT AUTHORITY\\SYSTEM";
};

instance of Win32_NTLogEvent
{
??? Category = 2;
??? CategoryString = "Logon/Logoff";
??? ComputerName = "MICROSOF-5524EC";
??? EventCode = 529;
??? EventIdentifier = 529;
??? EventType = 5;
??? InsertionStrings = {"joe", "MICROSOF-5524EC", "2", "Advapi? ", "Negotiate", "MICROSOF-5524EC"};
??? Logfile = "Security";
??? Message = "Logon Failure:
\n
\n\tReason:\t\tUnknown user name or bad password
\n
\n\tUser Name:\tjoe
\n
\n\tDomain:\t\tMICROSOF-5524EC
\n
\n\tLogon Type:\t2
\n
\n\tLogon Process:\tAdvapi
\n
\n\tAuthentication Package:\tNegotiate
\n
\n\tWorkstation Name:\tMICROSOF-5524EC
\n";
??? RecordNumber = 16251;
??? SourceName = "Security";
??? TimeGenerated = "20100423091037.000000+480";
??? TimeWritten = "20100423091037.000000+480";
??? Type = "audit failure";
??? User = "NT AUTHORITY\\SYSTEM";
};

??? regex=re.compile(r'(User Name|Logon account):\s*\w*')
??? r=re.search(regex,string)
??? if r:
??????? return r.group()
??? else:
??????? return 0

class myAuditLog():
??? def __init__(self):
??????? cc=wmi.WMI(privileges=["Security"])
??????? self.obj=cc.Win32_NTLogEvent()

??? #type'll be success or failure.
??? def get_history(self,type):
??????? log_type={'success':4,'failure':5}
??????? s_log=[]
??????? for s in self.obj:
??????????? if s.EventType == log_type[type]:
??????????????? m=reg(s.Message)
??????????????? if m:
??????????????????? s_log.append(s.CategoryString+', '+reg(s.Message)+', '+s.TimeWritten+', '+s.Type)
??????? return s_log"""

#############################
#?????????????????????????? #
#??????? Share????????????? #
#?????????????????????????? #
#############################
#定義myShare類用于共享檢查及設置
class myShare(myWmi):
??? def __init__(self,name=""):
??????? myWmi.__init__(self,c.Win32_Share)

??? def show_share(self):
??????? share_list=[]

??????? for s in self.obj:
??????????? item_str = s.Name + ' ' +s.Path
??????????? share_list.append(item_str)
??????????? #print s.Name,'\t',s.Path
??????? return share_list

??? def delete(self):
??????? for s in self.obj:
??????????? s.Delete()

"""def mycmd(cmd):
??? try:
??????? p=subprocess.Popen(cmd,shell=True,stdout=subprocess.PIPE,stderr=subprocess.PIPE)
??????? (stdoutput,erroutput)=p.communicate()
??? except OSError:
??????? print "command %s wrong, check the command please!" % cmd
??? return (stdoutput,erroutput)"""

def log(log_file,log_string,description):
??? try:

??????? f=open(log_file,'a+')
??????? #f.write(time.strftime(TIME_FORMAT))
??????? f.write(description + '\n')
??????? f.write(str(log_string))
??????? f.write('\n\n')
??????? #f.write(time.strftime(TIME_FORMAT)+' '+log_string+'\n')
??????? f.close()
??? except IOError,e:
??????? print e
??????? #print "Can't open log file %s." % log_file
??????? sys.exit()

def log_server(log_file,log_string):
??? try:
??????? f=open(log_file,'a+')
??????? f.write(str(log_string))
??????? f.close()
??? except IOError,e:
??????? print e
??????? #print "Can't open log file %s." % log_file
??????? sys.exit()

if __name__=='__main__':

??? #log_path = sys.path[0]+'/data/win.log'
??? log_path = r'c:\win.log'

??? #網絡配置
??? network_config().config_setup()
??? network_config().tcp_config()

??? #系統服務設置
??? myService().change_mode('disabled')

??? #基礎配置
??? win_Base().win_setup()

??? #重命名管理員賬戶
??? t = myAccount()
??? if 'Administrator' in t.show_userlist_admin():
??????? t.rename_user('administrator','admin')
??? elif 'admin' in t.show_userlist_admin():
??????? print 'user_admin has been chanaged!'
??? else:
??????? print t.show_userlist_admin()

??? print 'Windows base setup has finished!!'

??? #帳號列表
??? t =? myAccount().show_user_list()
??? output=open(log_path,"a+")
??? output.write('[Account List]\n')
??? for user in t:
??????? output.write('Windows Account is %s\n' %user)
??? output.write('\n')

??? #系統服務
??? t = myService().get_service_info()

??? '''item_count? = len(t)
??? n = 0
??? log_server(log_path,'[Service List]\n')

??? while True:
??????? for item in t:
??????????? item_value = '<' +str(item['pid'])+ '> <' + item['stat']+ '> <' + item['displayname']+ '>? <' + item['name'] + '> <' + item['startmode']+ '>'+'\n'
??????????? log_server(log_path,item_value)
??????????? n += 1
??????????? if n > item_count:
??????????????? break
??????? break
??? log_server(log_path,'\n')'''

??? output=open(log_path,"a+")
??? output.write('\n')
??? output.write('[Server List]\n')
??? for item in t:
??????? output.write('%-35s %-60s %-5s %-8s %-10s \n' %(item['name'],item['displayname'],item['pid'],item['stat'],item['startmode']))
??? output.write('\n')

??? #系統啟動項列表
??? t = show_startupcommand()
??? output=open(log_path,"a+")
??? output.write('\n')
??? output.write('[Startup_List]\n')
??? for item in t:
#??????? output.write('%-18s %-20s %-s \n' %(item['Name'],item['Command'],item['Location']))
??????? output.write('%-20s %-s \n' %(item['Name'],item['Command']))
??? output.write('\n')
??? '''n = 0
??? item_count = len(t)
??? log_server(log_path,'[Start up]\n')
??? while True:
??????? for item in t:
??????????? item_value = '<' + item +? '>' + '\n'
??????????? log_server(log_path,item_value)
??????????? n += 1
??????????? if n > item_count:
??????????????? break
??????? break
??? log_server(log_path,'\n')'''

??? #共享模塊
??? t = myShare().show_share()

??? output=open(log_path,"a+")
??? output.write('[Share Information]\n')
??? for user in t:
??????? output.write('Share item is %s\n' %user)
??? output.write('\n')

??? #系統信息檢查

??? t = myOs().get_os_info()
??? output=open(log_path,"a+")
??? output.write('\n')
??? output.write('[OS Information]\n')
??? for m in t.keys():
??????? output.write("%-20s: %-s\n" %(m,t[m]))
??? output.write('\n')

??? '''
??? log_server(log_path,'[OS Information]\n')
??? item_value = '<' + str(t['fullname'])+ '> <' + str(t['version'])+ '> <'? + str(t['lastboottime']) + '>' + '\n'
??? log_server(log_path,item_value)
??? log_server(log_path,'\n')'''

??? #Windows 更新補丁檢查
??? myOs().update_information()
??? #/*********Windows安全檢查***************/
??? #克隆帳號檢查
??? t = chk_clone_account()
??? if chk_clone_account():
??????? Item_value = 'Account has been clone!\n'
??????? log_server(log_path,'[Clone Account Check]\n')
??????? log_server(log_path,Item_value)
??????? log_server(log_path,'\n')
??? else:
??????? Item_value = 'Account has not clone!\n'
??????? log_server(log_path,'[Clone Account Check]\n')
??????? log_server(log_path,Item_value)
??????? log_server(log_path,'\n')

??? #系統服務設置
??? output=open(log_path,"a+")
??? toclose=[]
??? blacklist_path = sys.path[0]+'/data/svr_blacklist.txt'
??? f=open(blacklist_path)
??? svr_blacklist = f.readlines()
??? f.close()
??? s=myService()
??? svr_stat=s.get_service_info()
??? #print svr_blacklist
??? #print svr_stat
??? for b in svr_blacklist:
????? b=b.strip()
????? for svr in svr_stat:
??????? if svr["name"] == b and svr["startmode"] != "Disabled":
????????? toclose.append(b)
??? #output.write('*'*50+'\r\n')

??? output.write('[Service check]\r\n')
??? #output.write('*'*50+'\r\n')
??? for s in toclose:
????? output.write("%s should be disabled\r\n" % s)

??? #磁盤信息
??? myOs().get_diskinfo()

??? #磁盤分區信息
??? myOs().get_partitioninfo()

??? #網卡信息
??? myOs().get_networkadapter()

??? #系統進程列表

??? t = myProcess().get_process_info()
??? output=open(log_path,"a+")
??? output.write('\n')
??? output.write('[System processlist]\r\n')
??? for x in t:
??????? if x[2] != None:
??????????? output.write('%-22s %-5s %-20s %-s\n' %(x[1],x[0],datetime.datetime.strptime(str(str(x[2]).split('.')[0]),'%Y%m%d%H%M%S'),x[3]))
??? output.write('\n')

??? #系統服務設置

??? #toclose=[]
??? blacklist_path = sys.path[0]+'/data/svr_blacklist.txt'
??? f=open(blacklist_path)
??? svr_blacklist = f.readlines()
??? f.close()
??? for b in svr_blacklist:
??????? b = b.strip()
??????? myService().change_mode(b,'Disabled')
??? print 'Windows check has finished!!'
??? sys.exit

總結

以上是生活随笔為你收集整理的python用WMI等获取及修改windows系统信息的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。