czjt1234

vbs

s = "SELECT * FROM __InstanceOperationEvent WITHIN 1 WHERE " & _
    "TargetInstance ISA 'Win32_LogicalDisk' AND TargetInstance.DriveType = 2"
Set oWshShell = CreateObject("WScript.Shell")
Set oWMI = GetObject("Winmgmts:\\.\Root\Cimv2")
Set oSWbemEventSource = oWMI.ExecNotificationQuery(s)
Do
    Set oSWbemObject = oSWbemEventSource.NextEvent()
    Select Case oSWbemObject.Path_.Class
        Case "__InstanceCreationEvent"
            'MsgBox "U盘插入，盘符：" & oSWbemObject.TargetInstance.DeviceId
            oWshShell.Run "net use ......", 0
        Case "__InstanceDeletionEvent"
            'MsgBox "U盘移除，盘符：" & oSWbemObject.TargetInstance.DeviceId
            oWshShell.Run "net use ......", 0
    End Select
Loop
复制代码

net命令自己修改一下

czjt1234

回复 12# newswan


需要这么查询的目的是？
没理解什么环境需要这个需求

czjt1234

回复 15# newswan


我测试了win7x64

拔插U盘会触发设定的程序

在U盘上写入删除修改文件，均不会触发设定的程序

czjt1234

回复 18# newswan


为什么要加 case else
原代码已经满足了你的需求，不是不要加这个么
加了这个反而不好

还有 ps 不是用了 Switch ($class) 么
你把这个去掉当然有问题了

czjt1234

提前过滤掉 __InstanceModificationEvent
代码运行查看cpu占用基本为0，不用在意这个吧
再说19楼说了，即使过滤掉，还是要对结果进行 case 或 Switch

非要过滤掉，vbs可以变通一下，当然代码非但没简洁反而更复杂了

s1 = "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_LogicalDisk' AND TargetInstance.DriveType = 2"
s2 = "SELECT * FROM __InstanceDeletionEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_LogicalDisk' AND TargetInstance.DriveType = 2"
Set oWshShell = CreateObject("WScript.Shell")
Set oWMI = GetObject("Winmgmts:\\.\Root\Cimv2")
Set oSWbemSink = WScript.CreateObject("WbemScripting.SWbemSink", "Sink_")
Set o1 = CreateObject("WbemScripting.SWbemNamedValueSet")
o1.Add "类型", "插入"
Set o2 = CreateObject("WbemScripting.SWbemNamedValueSet")
o2.Add "类型", "拔出"
oWMI.ExecNotificationQueryAsync oSWbemSink, s1,,,, o1
oWMI.ExecNotificationQueryAsync oSWbemSink, s2,,,, o2
Do
    WScript.Sleep 100
Loop
Sub Sink_OnObjectReady(objWbemObject, objWbemAsyncContext)
    If objWbemAsyncContext.Item("类型") = "插入" Then msgbox "插入"
    If objWbemAsyncContext.Item("类型") = "拔出" Then msgbox "拔出"
End Sub
复制代码