Link to home
Start Free TrialLog in
Avatar of PeterSinger
PeterSingerFlag for Australia

asked on

GPO WMI Filter to check if a machine is a server 2000 or 2003 and it is NOT a domain controler

Hi,

Someone great with WMI filters could comment on this.  I want a "select * from" command for a WMI filter in AD GPO.

I want the filter to work in the "root\CIMV2" namespace of course. I want to check if the following is true;

A windows Server, 2000 or 2003 and NOT a domain Controler.

Thanks in advance.
Peter
ASKER CERTIFIED SOLUTION
Avatar of Michael Pfister
Michael Pfister
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of PeterSinger

ASKER

The solution is to create a WMI filter with the following statement;
For Server 2003 and above only
Select *  from Win32_ComputerSystem where DomainRole = 3
As commented above the WMI filter will not work on a 2000 server at all.
I created a batch file and ran it in the logon section and made this policy only run at logon.
The script did a check fior the operating system then ignored windows 2000 domain controlers.
for /f "tokens=* delims=" %%a in ('ver') do @set osversion=%%a
Peter
I placed the solution on-line to the issue but I would not have reached the solution if the comment was not made about Windows 2000 abilities re WMI filters.