Windows PowerShell command on Get-command Remove-WmiObject

NAME

Remove-WmiObject

SYNOPSIS

Deletes an instance of an existing Windows Management Instrumentation (WMI) class.

SYNTAX

Remove-WmiObject [-Class] [-AsJob] [-Authentication {Default | None | Connect | Call | Packet |

PacketIntegrity | PacketPrivacy | Unchanged}] [-Authority ] [-ComputerName ] [-Confirm]

[-Credential ] [-EnableAllPrivileges] [-Impersonation {Default | Anonymous | Identify | Impersonate

| Delegate}] [-Locale ] [-Namespace ] [-ThrottleLimit ] [-WhatIf] []

Remove-WmiObject [-AsJob] [-Authentication {Default | None | Connect | Call | Packet | PacketIntegrity |

PacketPrivacy | Unchanged}] [-Authority ] [-ComputerName ] [-Confirm] [-Credential

] [-EnableAllPrivileges] [-Impersonation {Default | Anonymous | Identify | Impersonate | Delegate}]

[-Locale ] [-Namespace ] -Path [-ThrottleLimit ] [-WhatIf] []

Remove-WmiObject [-AsJob] [-Authentication {Default | None | Connect | Call | Packet | PacketIntegrity |

PacketPrivacy | Unchanged}] [-Authority ] [-ComputerName ] [-Confirm] [-Credential

] [-EnableAllPrivileges] [-Impersonation {Default | Anonymous | Identify | Impersonate | Delegate}]

[-Locale ] [-Namespace ] [-ThrottleLimit ] [-WhatIf] []

Remove-WmiObject [-AsJob] [-Authentication {Default | None | Connect | Call | Packet | PacketIntegrity |

PacketPrivacy | Unchanged}] [-Authority ] [-ComputerName ] [-Confirm] [-Credential

] [-EnableAllPrivileges] [-Impersonation {Default | Anonymous | Identify | Impersonate | Delegate}]

[-Locale ] [-Namespace ] [-ThrottleLimit ] [-WhatIf] []

Remove-WmiObject [-AsJob] [-Authentication {Default | None | Connect | Call | Packet | PacketIntegrity |

PacketPrivacy | Unchanged}] [-Authority ] [-ComputerName ] [-Confirm] [-Credential

] [-EnableAllPrivileges] [-Impersonation {Default | Anonymous | Identify | Impersonate | Delegate}]

[-Locale ] [-Namespace ] [-ThrottleLimit ] [-WhatIf] []

Remove-WmiObject [-AsJob] [-Confirm] -InputObject [-ThrottleLimit ] [-WhatIf]

[]

DESCRIPTION

The Remove-WmiObject cmdlet deletes an instance of an existing Windows Management Instrumentation (WMI)class.

PARAMETERS

-AsJob []

Indicates that this cmdlet run as a background job. Use this parameter to run commands that take a long time to finish. New CIM cmdlets, introduced Windows PowerShell 3.0, perform the same tasks as the WMI cmdlets. The CIM cmdlets

comply with WS-Management (WSMan) standards and with the Common Information Model (CIM) standard, which

enables the cmdlets to use the same techniques to manage computers that run the Windows operating system and

those running other operating systems. Instead of using Remove-WmiObject , consider using the

Remove-CimInstancehttp://go.microsoft.com/fwlink/?LinkId=227964 cmdlet.

When you use the AsJob parameter, the command returns an object that represents the background job and then displays the command prompt. You can continue to work in the session while the job finishes. If

Remove-WmiObject is used against a remote computer, the job is created on the local computer, and the results

from remote computers are automatically returned to the local computer. To manage the job, use the cmdlets

that contain the Job noun (the Job cmdlets). To get the job results, use the Receive-Job cmdlet.

To use this parameter for remote computers, the local and remote computers must be configured for remoting. Start Windows PowerShell by using the Run as administrator option. For more information, see about_Remote_Requirements. For more information about Windows PowerShell background jobs, see about_Jobs and about_Remote_Jobs. Required? false Position? named Default value False Accept pipeline input? False Accept wildcard characters? false

-Authentication

Specifies the authentication level to use for the WMI connection. The acceptable values for this parameter are:

- -1: Unchanged.

- 0: Default.

- 1: None.

No authentication in performed. - 2: Connect. Authentication is performed only when the client establishes a

relationship with the application. - 3: Call. Authentication is performed only at the start of each call when

the application receives the request. - 4: Packet. Authentication is performed on all the data that is

received from the client. - 5: PacketIntegrity. All the data that is transferred between the client and the

application is authenticated and verified. - 6: PacketPrivacy. The properties of the other authentication

levels are used, and all the data is encrypted. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-Authority

Specifies the authority to use to authenticate the WMI connection. You can specify standard NTLM or Kerberos

authentication. To use NTLM, set the authority setting to ntlmdomain:, where

identifies a valid NTLM domain name. To use Kerberos, specify kerberos:\. You cannot

include the authority setting when you connect to the local computer. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-Class

Specifies the name of a WMI class that this cmdlet deletes. Required? true Position? 0 Default value None Accept pipeline input? False Accept wildcard characters? false

-ComputerName

Specifies the name of the computer on which this cmdlet runs. The default is the local computer. Type the NetBIOS name, an IP address, or a fully qualified domain name of one or more computers. To specify the local computer, type the computer name, a dot (.), or localhost.

This parameter does not rely on Windows PowerShell remoting. You can use the ComputerName parameter even if

your computer is not configured to run remote commands. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-Confirm []

Prompts you for confirmation before running the cmdlet. Required? false Position? named Default value False Accept pipeline input? False Accept wildcard characters? false

-Credential

Specifies a user account that has permission to perform this action. The default is the current user. Type a user name, such as User01 or Domain01\User01, or enter a PSCredential object, such as one generated by

the Get-Credential cmdlet. If you type a user name, this cmdlet prompts you for a password.

Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-EnableAllPrivileges []

Indicates that this cmdlet enables all the permissions of the current user before the command it makes the WMI call. Required? false Position? named Default value False Accept pipeline input? False Accept wildcard characters? false

-Impersonation

Specifies the impersonation level to use. The acceptable values for this parameter are:

- 0: Default. Reads the local registry for the default impersonation level, which is usually set to 3:

Impersonate. - 1: Anonymous. Hides the credentials of the caller. - 2: Identify. Allows objects to query the

credentials of the caller. - 3: Impersonate. Allows objects to use the credentials of the caller. - 4:

Delegate. Allows objects to permit other objects to use the credentials of the caller. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-InputObject

Specifies a ManagementObject object to use as input. When this parameter is used, all other parameters are ignored. Required? true Position? named Default value None Accept pipeline input? True (ByValue) Accept wildcard characters? false

-Locale

Specifies the preferred locale for WMI objects. The Locale parameter is specified as an array in the MS_ format in the preferred order. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-Namespace

Specifies the WMI repository namespace where the referenced WMI class is located when it is used with the Class parameter. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-Path

Specifies the WMI object path of a WMI class, or specifies the WMI object path of an instance of a WMI class to delete. Required? true Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-ThrottleLimit

Specifies the maximum number of concurrent connections that can be established to run this command. This parameter is used together with the AsJob parameter. The throttle limit applies only to the current command, not to the session or to the computer. Required? false Position? named Default value None Accept pipeline input? False Accept wildcard characters? false

-WhatIf []

Shows what would happen if the cmdlet runs. The cmdlet is not run. Required? false Position? named Default value False Accept pipeline input? False Accept wildcard characters? false This cmdlet supports the common parameters: Verbose, Debug, ErrorAction, ErrorVariable, WarningAction, WarningVariable, OutBuffer, PipelineVariable, and OutVariable. For more information, see about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).

INPUTS

System.Management.ManagementObject You can pipe a management object to this cmdlet.

OUTPUTS

None, System.Management.Automation.RemotingJob This cmdlet returns a job object, if you specify the AsJob parameter. Otherwise, it does not generate any output.

NOTES

Example 1: Close all instances of a Win32 process

PS C:\>notepad

PS C:\> $np = Get-WmiObject -Query "select * from win32_process where name='notepad.exe'"

PS C:\> $np | Remove-WmiObject

This example closes all the instances of Notepad.exe. The first command starts an instance of Notepad.

The second command uses the Get-WmiObject cmdlet to retrieve the instances of the Win32_Process that correspond to

Notepad.exe, and then stores them in the $np variable.

The third command passes the object in the $np variable to Remove-WmiObject , which deletes all the instances of

Notepad.exe.

Example 2: Delete a folder

PS C:\>$a = Get-WMIObject -Query "Select * From Win32_Directory Where Name ='C:\\Test'"

PS C:\> $a | Remove-WMIObject

This command deletes the C:\Test folder.

The first command uses Get-WMIObject to query for the C:\Test folder, and then stores the object in the $a

variable.

The second command pipes the $a variable to Remove-WMIObject , which deletes the folder.