laptops/desktops

In active directory is there anyway to diffrentiate between a desktop PC and a laptop? If so in ADUC console can you detail how?  What kind of different security settings would typically be applied to a laptop and not to a PC? Anything above beyond disk encryption?

Thanks
LVL 3
pma111Asked:
Who is Participating?
 
Joseph MoodyBlogger and wearer of all hats.Commented:
We treat them the same. We will use WMI to filter GPOs that should only apply to laptops (such as wireless/offline file policies). Here is the WMI

Select * from Win32_Battery where BatteryStatus <> 0
 
0
 
pma111Author Commented:
Can you let me know what the query is returning and how it filters for laptops?

Thanks
0
 
pma111Author Commented:
WHat do the wireless / offline file policies actually do in terms of security on the laptops?

Excuse my ignorance.
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
Joseph MoodyBlogger and wearer of all hats.Commented:
It returns if the computer has a battery installed or not. If the computer has a battery, it applies the policy.
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
The wireless policy configures the default networks to connects to but also specifiy that adhoc networks can't be connected to. This prevents users from accidently connecting to ad-hoc networks named things like FREE WIRELESS or PUBLIC WIRELESS when the network is actually used to prompt users for passwords/information

Offline files policy configures default offline file settings but also enables encryption to the offline file cache.
0
 
pma111Author Commented:
Not much of a hardware buff - I take it a normal desktop just runs off the mains and has no battery inside - just laptops that do.
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
Yep!
0
 
Mike KlineCommented:
Darren Mar-Elia (GP MVP) had a contest on his list a few years ago about this.  Joel came up with something clever]

****Not taking credit for Joel's cool answer****


Select * from Win32_PhysicalMemory where FormFactor != 12

Returns True on computers that do not have SoDimm form factor memory and False on computers with SoDimm form factor memory.  The assumption is that all laptops will have this style memory and desktops will not.  Works in my environment, but it's a pretty small environment.

*********End Joel's submission***********

Joel won.

Thanks

Mike
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.