Using WMI to query AMT within

[idata]

Is there a way to leverage WMI to query the AMT status of a client - e.g. determine if AMT turned on at all, what is the current power state, etc.? If so, is there documentation? I was trying to find some code snippets on the vPro Expert site but have come up empty.

An example would be, for a Lenovo M58p in an SCCM collection, use WMI to determine if AMT is turned off in the BIOS, and if it is turned off, push out an advertisement to turn it on, and then initiate provisioning.

[DPopr]

This might help if you use SCCM:

/community/openportit/vproexpert/microsoft-vpro/blog/2008/05/05/configmgr-and-wmi-integration-for-vpro http://communities.intel.com/community/openportit/vproexpert/microsoft-vpro/blog/2008/05/05/configmgr-and-wmi-integration-for-vpro

[idata]

Wayne,

Unfortunately, it's not possible to enable / disable AMT from within the client OS. You could always detect the presence of AMT using the Win32_PnpEntity class though, if you know the DeviceID(s) that you're looking for. This doesn't necessarily require you to have the HECI driver installed either, as you're simply pulling raw device information.

The current power state would need to be pulled using AMT interfaces, unless the machine was powered on, of course. I would personally recommend looking into the Intel AMT Developer Toolkit, which provides a very powerful, but easy to use .NET interface into AMT. Because it is built on .NET, you can also import the assembly into PowerShell, and use it from there. I've written a handful of articles on how to do this.

Trevor Sullivan

Systems Engineer

[Matthew_R_Intel]

As noted by David, The SCCM will collect hardware information on if the client is AMT capable; however, it will have a dependency on the ME / Heci Driver being installed.

You may also want to take a look at the /community/openportit/vproexpert/blog/2008/10/03/iamt-scan-custom-inventory-helps-with-enterprise-activations AMT Scan utility. You can run it as a SCCM Advertisement and it will record the AMT information in the registry. From there you will need to programmatically extract the information for some type of report.

In regards to your example...

An example would be, for a Lenovo M58p in an SCCM collection, use WMI to determine if AMT is turned off in the BIOS, and if it is turned off, push out an advertisement to turn it on, and then initiate provisioning.

... it is a little bit of cart before the horse. The AMT client needs to be provisioned before you can power on the AMT client or programically query power state.

You could run the following /docs/DOC-3815 SCCM AMT Site Server Operation Script via and advertisement on your collection. Just create an advertisement that runs the following command...

cscript sccmamtmgnt.vbs /s:YourSccmSiteFQDN /c:SiteCode /a:discovery

... It will initiate a network interrogation on the desired client to depend if it vPro capable. If all goes well, it will determine that an AMT status of the client as "Not Provisioned". From there you can created a collection where AMTStatus=3 and set the policy to initiate "Automatic provisioning".

--Matt Royer

[BMull]

Hey Matt,

I've updated the script for SCCM 2012.

http://blair-muller.blogspot.com.au/2012/09/a-script-to-perform-discover-amt-status.html Blair Muller's Blog: A script to perform a Discover AMT status task remotely for SCCM 2012

Regards,

Blair