我有一个磁盘有几个不同的事情正在进行。 我想确定大概多less磁盘活动是由于文件共享。 有没有这个柜台？
此外，我可能一直在做梦，我似乎记得看到一些程序，可能允许我监视文件在一个共享文件夹中的活动。 敲响任何铃声？ 谢谢。
参考监视文件夹的活动：
您可以使用WMI（CIM_DataFile）来监视文件夹，使用与查询类似的方式进行修改：
SELECT * FROM __InstanceOperationEvent WITHIN 1 WHERE TargetInstance ISA“CIM_DataFile”AND TargetInstance.Drive =“C：”AND TargetInstance.Path =“\ Data”
像这样的东西：
' Full path to the folder to monitor sPath = "\\localhost\c$\Scripts" sComputer = split(sPath,"\")(2) sDrive = split(sPath,"\")(3) sDrive = REPLACE(sDrive, "$", ":") sFolders = split(sPath,"$")(1) sFolders = REPLACE(sFolders, "\", "\\") & "\\" ' Create our WMI instance Set objWMIService = GetObject("winmgmts:\\" & sComputer & "\root\cimv2") ' Begin monitoring Set colMonitoredEvents = objWMIService.ExecNotificationQuery _ ("SELECT * FROM __InstanceOperationEvent WITHIN 1 WHERE " _ & "TargetInstance ISA 'CIM_DataFile' AND " _ & "TargetInstance.Drive='" & sDrive & "' AND " _ & "TargetInstance.Path='" & sFolders & "'") Wscript.Echo vbCrlf & Now & vbTab & _ "Begin Monitoring for a Folder Change Event..." & vbCrlf Do Set objLatestEvent = colMonitoredEvents.NextEvent Select Case objLatestEvent.Path_.Class Case "__InstanceCreationEvent" WScript.Echo Now & vbTab & objLatestEvent.TargetInstance.FileName _ & " was created" & vbCrlf Case "__InstanceDeletionEvent" WScript.Echo Now & vbTab & objLatestEvent.TargetInstance.FileName _ & " was deleted" & vbCrlf Case "__InstanceOperationEvent" If objLatestEvent.TargetInstance.LastModified <> _ objLatestEvent.PreviousInstance.LastModified then WScript.Echo Now & vbTab & objLatestEvent.TargetInstance.FileName _ & " was modified" & vbCrlf End If IF objLatestEvent.TargetInstance.LastAccessed <> _ objLatestEvent.PreviousInstance.LastAccessed then WScript.Echo Now & vbTab & objLatestEvent.TargetInstance.FileName _ & " was accessed" & vbCrlf End If End Select Loop Set objWMIService = nothing Set colMonitoredEvents = nothing Set objLatestEvent = nothing