Deploy Software Based on Criteria

Posted on 2009-04-08
Last Modified: 2012-05-06
I have a domain with roughly 120 PCs and 30 or so servers.  I want to be able to use Software Installation through AD using .msi files, or other means, and target based on machines that need it.

For example, I need to deploy the Office 2007 Compatibility pack.  I know how to deploy it to the whole domain, but I don't want to deploy to machines that have Office 2007, or servers.

I could create an OU for machines with this, but doing an OU for each install would get messy quick.

Any suggestions on how I can do this effectively, and going forward for other installations once I define the scope?
Question by:rosederekj
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
LVL 38

Assisted Solution

Shift-3 earned 300 total points
ID: 24097918
If all of your machines are XP or newer then you can use a WMI filter to restrict which machines the GPO applies to.

Assisted Solution

mikainz earned 200 total points
ID: 24097939
You can use a computer group which you allow the processing of your GPO.
+ easy to set up
- you need to add the computer objects to the group to get the software
You can build a WMI-filter.
- need knowledge of WMI-filtering
+ not further maintance if new computers are member of your domain.

Author Comment

ID: 24098430
Seems good, but what would an example be?  I went to create a WMI filter but couldn't find any syntax examples.  In the attached screen capture, I have a filter I named "Test for Office Compatability Pack", then went to "Add" for the Query, and I assumed the namespace is root\cimv2\applications.

What would I have to put for instance to find machines with Office 2003 Basic Edition, and/or Office 2003 Professional?
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 24098953
Update -

I found the syntax I believe:

SELECT * FROM Win32_Product WHERE (Caption <> "Microsoft Office%2007%")

or I can use

SELECT * FROM Win32_Product WHERE (Caption LIKE "Microsoft Office%2003%")

In both cases when I try to save, I get the error of "a syntax error occured trying to evaluate a query string"

Author Comment

ID: 24099775
I have what I need with regards to the query -

SELECT * FROM Win32_Product
WHERE Name Like 'Microsoft Office %2003%'

Question is how can I test this query?  I would like to see what machines it returns so I can validate a few.
LVL 38

Accepted Solution

Shift-3 earned 300 total points
ID: 24099928
There doesn't appear to be a good way to test it other than creating a new sub-OU, moving some computers into it, applying a GPO to it with a filter, then using the Group Policy Results node in GPMC to see which ones it applied to.

Assisted Solution

mikainz earned 200 total points
ID: 24100017
You can only try to execute the WMI-query via vbscript on different remote machines,
think there are a lot of examples how to do this.
maybe you can check out
and you can adopt the script for your

Author Closing Comment

ID: 31568060
WMI Filtering and the Sub OU to test the output works for me -thanks everyone!

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SCCM Active Directory Audit functions 2 29
DNS Replication 12 70
Event ID 29 KDC Win 2008 R2 DC 6 20
Password change / expire 4 40
Last week, our Skyport webinar on “How to secure your Active Directory” ( provided 218 attendees with a step-by-step guide for…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question