Avatar of juriang
juriang
Flag for Netherlands asked on

Combining WMI Filter on GPO

Hi,

I'm in a situation where I need to combine 2 WMI filters and need some help.

Situation:
Funtional level 2003 domain with mixed client environment (Windows XP and 7) where we used a WMI filter to determine which GPO needs to be applied on which OS.

The filter used for this:
Select Version, ProductType FROM Win32_OperatingSystem WHERE Version >= "6.1" AND ProductType ="1"

Open in new window


Now one of our GPO is for folder redirection of the My Documents folder where at one of our sites these folders are split over 2 file servers (because of workload on the servers). the deviation is done by username so all users with a username from A to K are on server1 and from L to Z on server 2.

First I would need a WMI filter that can query if the username is starting with A to K or L to Z and then combine it with the above query to target the correct OS.

Please help.

Special thanks,

Jurian
Active DirectoryMicrosoft Server OSWindows 7

Avatar of undefined
Last Comment
David Johnson, CD

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
David Johnson, CD

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Mike Thomas

I would also just split the users to 2 OU's if you have the policies created, if you do not want to do that for others reason then create 2 security groups add the group to the permisssions of the policy while removing the default auithenticated users group.
juriang

ASKER
Thanks for the suggestions made.

Does this mean it is not possible to combine 2 WMI filters in 1?
snusgubben

You can chain queries together from different classes:

http://blogs.technet.com/b/askds/archive/2012/02/11/friday-mail-sack-get-off-my-lawn-edition.aspx#wmi

But I would avoid WMI queries if you can, so why not just make two Security Groups, (A and B).

On the Folder Redirection policy, choose: Target -> "Advanced - Specify locations for various user groups".
Group A -> redirect to the A-K file server and Group B > redirect to L-Z file server.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
David Johnson, CD

samaccountname / display name are not wmi objects but ldap objects