[已解决]实现 u盘插入拔出时，调用一个程序

czjt1234 · 发表于 2024-1-27 17:44:42

回复 15# newswan

我测试了win7x64

拔插U盘会触发设定的程序

在U盘上写入删除修改文件，均不会触发设定的程序

newswan · 发表于 2024-1-27 17:58:01

回复 16# czjt1234

会不停的有消息__InstanceModificationEvent

$psAction = {
$action = $eventArgs.NewEvent.__CLASS
Write-Host ""
Write-Host (Get-Date)
Write-Host $action
}
$psQuery = " select * from __InstanceOperationEvent within 1 where TargetInstance isa 'Win32_LogicalDisk' "
Register-WmiEvent -SourceIdentifier mountEvent -Query $psQuery -Action $psAction

复制代码

newswan · 发表于 2024-1-27 18:01:01

回复 16# czjt1234

你加上 case else 试试

WHY · 发表于 2024-1-27 18:04:56

回复 11# newswan

$query = "select * from __InstanceOperationEvent within 5 where (__CLASS='__InstanceCreationEvent' or __CLASS='__InstanceDeletionEvent') and TargetInstance isa 'Win32_LogicalDisk' and TargetInstance.DriveType=2";

复制代码

这样写，除了查询语句变长、变复杂，没啥太大意义。
即使这样写，还是需要 Swith 或 If 判断一下，除非插入与拔出时执行的是一样的命令（比如都是设置共享，或者都是删除共享）。

newswan · 发表于 2024-1-27 18:09:03

回复 19# WHY

谢谢，但是，我是为了避免的不需要的事件

czjt1234 · 发表于 2024-1-27 18:10:54

回复 18# newswan

为什么要加 case else
原代码已经满足了你的需求，不是不要加这个么
加了这个反而不好

还有 ps 不是用了 Switch ($class) 么
你把这个去掉当然有问题了

newswan · 发表于 2024-1-27 18:13:35

回复 21# czjt1234

这样通知订阅就提前过滤掉 __InstanceModificationEvent ，不用到 case 的才过滤掉

newswan · 发表于 2024-1-27 18:14:32

回复 19# WHY

让 ai 给合并，结果是个 250

czjt1234 · 发表于 2024-1-27 18:49:07

提前过滤掉 __InstanceModificationEvent
代码运行查看cpu占用基本为0，不用在意这个吧
再说19楼说了，即使过滤掉，还是要对结果进行 case 或 Switch

非要过滤掉，vbs可以变通一下，当然代码非但没简洁反而更复杂了

s1 = "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_LogicalDisk' AND TargetInstance.DriveType = 2"
s2 = "SELECT * FROM __InstanceDeletionEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_LogicalDisk' AND TargetInstance.DriveType = 2"
Set oWshShell = CreateObject("WScript.Shell")
Set oWMI = GetObject("Winmgmts:\\.\Root\Cimv2")
Set oSWbemSink = WScript.CreateObject("WbemScripting.SWbemSink", "Sink_")
Set o1 = CreateObject("WbemScripting.SWbemNamedValueSet")
o1.Add "类型", "插入"
Set o2 = CreateObject("WbemScripting.SWbemNamedValueSet")
o2.Add "类型", "拔出"
oWMI.ExecNotificationQueryAsync oSWbemSink, s1,,,, o1
oWMI.ExecNotificationQueryAsync oSWbemSink, s2,,,, o2
Do
WScript.Sleep 100
Loop
Sub Sink_OnObjectReady(objWbemObject, objWbemAsyncContext)
If objWbemAsyncContext.Item("类型") = "插入" Then msgbox "插入"
If objWbemAsyncContext.Item("类型") = "拔出" Then msgbox "拔出"
End Sub

复制代码

newswan · 发表于 2024-1-30 10:40:11

回复 24# czjt1234

这算强迫症

newswan · 发表于 2024-2-5 15:39:52

最终

if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')) {
Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -NoExit -File `"$PSCommandPath`"" -Verb RunAs
exit
}
$psQuery = @"
select * from __InstanceOperationEvent within 1
where TargetInstance isa 'Win32_LogicalDisk' and (__CLASS='__InstanceCreationEvent' or __CLASS='__InstanceDeletionEvent')
"@
$psAction = {
$action = $eventArgs.NewEvent.__CLASS
$diskDriveType = $event.SourceArgs.NewEvent.TargetInstance.DriveType
$diskLetter = $event.SourceArgs.NewEvent.TargetInstance.Name
$diskVolume = $event.SourceArgs.NewEvent.TargetInstance.VolumeName
Write-Host "`n"
Write-Host "- $( Get-Date -format "yyyy-MM-dd HH:mm:ss" ) -"
switch ( $diskDriveType ) {
2 {
$sharePath = $diskLetter + "movie"
$shareName = $diskVolume -replace "\D+","movie"
Switch ($action) {
"__InstanceCreationEvent" {
if ( Test-Path $sharePath ) {
Write-Host "USB Drive $diskLetter $diskVolume Inserted."
Write-Host $(net share $shareName=$sharePath /GRANT:everyone,CHANGE)
}
}
"__InstanceDeletionEvent" {
Write-Host "USB Drive $diskLetter $diskVolume Removed."
Write-Host $(net share $shareName /Delete)
}
}
}
5 {
$sharePath = $diskLetter
$shareName = $($sharePath -replace ":","_") + $diskVolume
Switch ($action) {
"__InstanceCreationEvent" {
Write-Host "Optical Drive $diskLetter $diskVolume Inserted."
Write-Host $(net share $shareName=$sharePath)
}
"__InstanceDeletionEvent" {
Write-Host "Optical Drive $diskLetter $diskVolume Removed."
Write-Host $(net share $shareName /Delete)
}
}
}
}
}
Unregister-Event mountEvent -ErrorAction SilentlyContinue
Register-WmiEvent -SourceIdentifier mountEvent -Query $psQuery -Action $psAction

复制代码

		自动登录	找回密码
密码			注册

[新手上路]批处理新手入门导读	[视频教程]批处理基础视频教程	[视频教程]VBS基础视频教程	[批处理精品]批处理版照片整理器
[批处理精品]纯批处理备份&还原驱动	[批处理精品]CMD命令50条不能说的秘密	[在线下载]第三方命令行工具	[在线帮助]VBScript / JScript 在线参考

[系统相关] [已解决]实现 u盘插入拔出时，调用一个程序

评分

评分