WMI filters

How would I create WMI filter that would exclude a particular server from a GPO?
ncmecAsked:
Who is Participating?
 
LauraEHunterMVPCommented:
Security filtering still provides a more flexible option - just deny the Apply Group Policy permission on the one GPO in question, it will not affect any other GPOs that are being applied.

For the WMI filter itself, I refer you to the following thread from the PAQ: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_2003_Active_Directory/Q_22864893.html
0
 
LauraEHunterMVPCommented:
Why not simply Deny the "Apply Group Policy" permission to that server account, or (better if you think you'll need to exclude other servers as well) a group object containing the account?

Since you can only apply 1 WMI filter to any given GPO, using WMI filters to accomplish what you're asking is not the most flexible method available to you.
0
 
ncmecAuthor Commented:
Sorry, I should have given more detail... I have several GPO's that I'm applying to servers. I just want to exclude one particular server from one particular GPO. I want the other GPOs to be processed. I'm just not clear on the syntax that the WMI query should have. Make sense?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
krawz187Commented:
Sounds like a WMI filter is not what you need.  LauraEHunterMVP has posted the info you seek.  A WMI filter would be more useful for something like...applying a group policy to Windows 2000 Professional machines only.
0
 
LauraEHunterMVPCommented:
...except for the fact that the Windows 2000 operating system doesn't support or understand WMI, so a better example might be "applying a group policy to Windows Server 2003 computers only", or "applying a group policy to all computers that have >500MB free space on their hard drive."
0
 
grayeCommented:
Hang on... WMI is preinstalled on Win2k.  It's an optional add-on for WinNT and Win9x.

True it might not be the best application for WMI filters, but it will certainly work!   Here is an example:

Root\CimV2; SELECT * FROM Win32_ComputerSystem where Name <> 'MyPC'
0
 
LauraEHunterMVPCommented:
A good point, I should've clarified - Windows 2000 systems cannot support WMI filtering when it comes to Group Policy Objects.  If a Win2K system goes to apply a GPO that has a WMI filter attached, the Win2K system will ignore the WMI filter outright and apply the GPO regardless.  So you can't deploy a GPO containing a WMI filter that excludes 2K machines, since the 2K machines won't process the WMI filter that would have excluded them.
0
 
ncmecAuthor Commented:
Thank you all for your help!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.