[系统相关] [已解决]实现 u盘插入拔出时，调用一个程序

newswan

有什么程序可以实现，当u盘 移动磁盘插入拔出时，调用一个程序， 批处理或者 powershell脚本

用于自动共享离线盘，
挂上的时候，自动共享 moive 目录
取下的时候，自动删除共享

newswan

回复 3# czjt1234

谢谢！

newswan

回复 5# WHY

谢谢！

newswan

回复 8# WHY

长时间运行的话，应该第一种好些吧

newswan

回复 10# WHY

新问题，学习了下相关知识，
__InstanceOperationEvent 包含3种事件：
__InstanceCreationEvent
__InstanceDeletionEvent
__InstanceModificationEvent

能不能在一个查询中查询 Creation Deletion ，避免 Modification

"select * from __InstanceCreationEvent within 5 where TargetInstance isa 'Win32_LogicalDisk' and TargetInstance.DriveType=2"
"select * from __InstanceDeletionEvent within 5 where TargetInstance isa 'Win32_LogicalDisk' and TargetInstance.DriveType=2"
复制代码

看了wql ，没找到 union ，还有什么办法吗？

newswan

回复 3# czjt1234

新问题，学习了下相关知识，
__InstanceOperationEvent 包含3种事件：
__InstanceCreationEvent
__InstanceDeletionEvent
__InstanceModificationEvent

能不能在一个查询中查询 Creation Deletion ，避免 Modification

"select * from __InstanceCreationEvent within 5 where TargetInstance isa 'Win32_LogicalDisk' and TargetInstance.DriveType=2"
"select * from __InstanceDeletionEvent within 5 where TargetInstance isa 'Win32_LogicalDisk' and TargetInstance.DriveType=2"
复制代码

看了wql ，没找到 union ，还有什么办法吗？

newswan

回复 4# yakeyun

一开始也是你这种方法，用 net share 和 wmic volume

newswan

回复 14# czjt1234

只需要订阅 __InstanceCreationEvent ， __InstanceDeletionEvent
但 __InstanceOperationEvent 还包含了 __InstanceModificationEven ，这个事件很多，也被订阅了， 写的时候，也会引发操作。
从优化的目的，应该去掉这个

newswan

回复 16# czjt1234

会不停的有消息__InstanceModificationEvent

$psAction = {
	$action = $eventArgs.NewEvent.__CLASS
	Write-Host ""
	Write-Host (Get-Date)
	Write-Host $action
}

$psQuery = " select * from __InstanceOperationEvent within 1 where TargetInstance isa 'Win32_LogicalDisk' "

Register-WmiEvent  -SourceIdentifier mountEvent  -Query $psQuery  -Action $psAction
复制代码

newswan

回复 16# czjt1234

你加上 case else 试试

newswan

回复 19# WHY

谢谢，但是，我是为了避免的不需要的事件

newswan

回复 21# czjt1234

这样通知订阅就 提前过滤掉 __InstanceModificationEvent ，不用到 case 的才过滤掉

newswan

回复 19# WHY

让 ai 给合并，结果是个 250

newswan

回复 24# czjt1234

这算强迫症

newswan

最终

if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')) {
    Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass  -NoExit -File `"$PSCommandPath`"" -Verb RunAs
    exit
}


$psQuery = @"
	select *  from __InstanceOperationEvent  within 1
	where TargetInstance  isa 'Win32_LogicalDisk' and (__CLASS='__InstanceCreationEvent' or __CLASS='__InstanceDeletionEvent')
"@

$psAction = {
	$action = $eventArgs.NewEvent.__CLASS
	$diskDriveType  = $event.SourceArgs.NewEvent.TargetInstance.DriveType
	$diskLetter  = $event.SourceArgs.NewEvent.TargetInstance.Name
	$diskVolume  = $event.SourceArgs.NewEvent.TargetInstance.VolumeName

	Write-Host "`n"
	Write-Host "- $( Get-Date -format "yyyy-MM-dd HH:mm:ss" ) -"

	switch ( $diskDriveType ) {
		2 {
			$sharePath = $diskLetter + "movie"
			$shareName = $diskVolume -replace "\D+","movie"
			
			Switch ($action) {
				"__InstanceCreationEvent" {
					if ( Test-Path $sharePath ) {
						Write-Host "USB Drive $diskLetter $diskVolume Inserted."
						Write-Host $(net share $shareName=$sharePath /GRANT:everyone,CHANGE)
					}
				}
				"__InstanceDeletionEvent" {
					Write-Host "USB Drive $diskLetter $diskVolume Removed."
					Write-Host $(net share $shareName /Delete)
				}
			}
		}
		5 {
			$sharePath = $diskLetter
			$shareName = $($sharePath -replace ":","_") + $diskVolume
			
			Switch ($action) {
				"__InstanceCreationEvent" {
					Write-Host "Optical Drive $diskLetter $diskVolume Inserted."
					Write-Host $(net share $shareName=$sharePath)
				}
				"__InstanceDeletionEvent" {
					Write-Host "Optical Drive $diskLetter $diskVolume Removed."
					Write-Host $(net share $shareName /Delete)
				}
			}
		}
	}
}


Unregister-Event mountEvent -ErrorAction SilentlyContinue
Register-WmiEvent  -SourceIdentifier mountEvent  -Query $psQuery  -Action $psAction
复制代码