I need to filter a Group Policy that denies local logon to a specific group of users because there are certain users that must be in that group which I do not want the policy to be enforced upon. The one variable that differentiates between the users is the "Company" field under the "Organization" tab in the A.D. profiles. The ones that I want the policy to be enforced upon MUST have "Student" in that field. Anything else results in the policy being ignored. I know how to pull that field through a full-blown script, but WMI Filters can't be a full script. They have to be a direct output of a WMI Class's values. Please help. Thank you in advance.