Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Using Multiple CLASSes in WMI filter query for GPO

Posted on 2014-09-18
9
925 Views
Last Modified: 2014-09-22
I want to configur a GPO for all workstations full stop and for all member servers that contain a C:\Program Files\Citrix\XenApp folder

Meaning the settings will be deployed to my Citrix Server farm and to my workstations

How do I combine CLASSes in a WMI query

Here is what I'm attempting to save but the GPM won't allow it...
(SELECT * FROM Win32_OperatingSystem WHERE ProductType = 1) OR (FROM Win32_Directory WHERE Name = 'C:\\Program Files (x86)\\Citrix\\XenApp')

Open in new window

0
Comment
Question by:antonioking
  • 5
  • 4
9 Comments
 
LVL 22

Expert Comment

by:yo_bee
ID: 40331801
You might make it easier on you if you put all your Citrix Servers in a single sub OU of their current OU.
Link your GPO to that out rather than trying to filter it.

Here is a link that may help
http://blogs.technet.com/b/askds/archive/2012/02/11/friday-mail-sack-get-off-my-lawn-edition.aspx#wmi
0
 

Author Comment

by:antonioking
ID: 40332099
Hi yo_bee!

Thanks for the reply, I have to disagree. Restructuring my AD certainly wouldn't be easier than creating a WMI filter for the GPO

Sure I could do that, but the policy needs to apply to all my workstations too.
I have multiple OUs for my workstations and only the workstations and citrix servers in 1 site should have the GPO applied.
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 40332329
Pretty sure that the link I posted should help or did you try that and it did not work?

Have you looked at http://sdmsoftware.com/gpoguy/free-tools/library/wmi-filter-validation-utility/
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:antonioking
ID: 40336142
Hi yo_bee
Thanks for the guides, the first link does not achieve what I was hoping, since both classes must result to true.
I actually was hoping to get my WMI query to work if just one class query is true.
The Win32_OperatingSystem ProductType =1 OR the Win32_Director Name = C:\\Program Files (x86)\\Citrix\\XenApp

I have tried the validation filter but I don't actually have a WMI query to test yet... this is what I need help with.
0
 
LVL 22

Accepted Solution

by:
yo_bee earned 500 total points
ID: 40336297
I am not sure you can even do this?
What is this GPO going to do?
0
 

Author Comment

by:antonioking
ID: 40336311
Install some software and some file GPPs
0
 
LVL 22

Assisted Solution

by:yo_bee
yo_bee earned 500 total points
ID: 40336318
The GPP part is easy because you will be able to create multiple WMI with either being true, but the install may need to be scripted out using WMI in the script to see if the install can start.

Is it an MSI or EXE that has switches for a silent install?
0
 

Author Closing Comment

by:antonioking
ID: 40336321
Hi yo_bee
The software is an MSI. I'll create a script to deploy the software and I'll modify the GPPs too.

Thanks
Antonio
0
 
LVL 22

Expert Comment

by:yo_bee
ID: 40336326
Good luck and if you need assistance I will be still monitoring this thread
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory replication delay is the cause to many problems.  Here is a super easy script to force Active Directory replication to all sites with by using an elevated PowerShell command prompt, and a tool to verify your changes.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question