• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 930
  • Last Modified:

WMI filters

How would I create WMI filter that would exclude a particular server from a GPO?
0
ncmec
Asked:
ncmec
3 Solutions
 
LauraEHunterMVPCommented:
Why not simply Deny the "Apply Group Policy" permission to that server account, or (better if you think you'll need to exclude other servers as well) a group object containing the account?

Since you can only apply 1 WMI filter to any given GPO, using WMI filters to accomplish what you're asking is not the most flexible method available to you.
0
 
ncmecAuthor Commented:
Sorry, I should have given more detail... I have several GPO's that I'm applying to servers. I just want to exclude one particular server from one particular GPO. I want the other GPOs to be processed. I'm just not clear on the syntax that the WMI query should have. Make sense?
0
 
LauraEHunterMVPCommented:
Security filtering still provides a more flexible option - just deny the Apply Group Policy permission on the one GPO in question, it will not affect any other GPOs that are being applied.

For the WMI filter itself, I refer you to the following thread from the PAQ: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_2003_Active_Directory/Q_22864893.html
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
krawz187Commented:
Sounds like a WMI filter is not what you need.  LauraEHunterMVP has posted the info you seek.  A WMI filter would be more useful for something like...applying a group policy to Windows 2000 Professional machines only.
0
 
LauraEHunterMVPCommented:
...except for the fact that the Windows 2000 operating system doesn't support or understand WMI, so a better example might be "applying a group policy to Windows Server 2003 computers only", or "applying a group policy to all computers that have >500MB free space on their hard drive."
0
 
grayeCommented:
Hang on... WMI is preinstalled on Win2k.  It's an optional add-on for WinNT and Win9x.

True it might not be the best application for WMI filters, but it will certainly work!   Here is an example:

Root\CimV2; SELECT * FROM Win32_ComputerSystem where Name <> 'MyPC'
0
 
LauraEHunterMVPCommented:
A good point, I should've clarified - Windows 2000 systems cannot support WMI filtering when it comes to Group Policy Objects.  If a Win2K system goes to apply a GPO that has a WMI filter attached, the Win2K system will ignore the WMI filter outright and apply the GPO regardless.  So you can't deploy a GPO containing a WMI filter that excludes 2K machines, since the 2K machines won't process the WMI filter that would have excluded them.
0
 
ncmecAuthor Commented:
Thank you all for your help!
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now