Solved

Using Multiple CLASSes in WMI filter query for GPO

Posted on 2014-09-18
9
789 Views
Last Modified: 2014-09-22
I want to configur a GPO for all workstations full stop and for all member servers that contain a C:\Program Files\Citrix\XenApp folder

Meaning the settings will be deployed to my Citrix Server farm and to my workstations

How do I combine CLASSes in a WMI query

Here is what I'm attempting to save but the GPM won't allow it...
(SELECT * FROM Win32_OperatingSystem WHERE ProductType = 1) OR (FROM Win32_Directory WHERE Name = 'C:\\Program Files (x86)\\Citrix\\XenApp')

Open in new window

0
Comment
Question by:antonioking
  • 5
  • 4
9 Comments
 
LVL 21

Expert Comment

by:yo_bee
Comment Utility
You might make it easier on you if you put all your Citrix Servers in a single sub OU of their current OU.
Link your GPO to that out rather than trying to filter it.

Here is a link that may help
http://blogs.technet.com/b/askds/archive/2012/02/11/friday-mail-sack-get-off-my-lawn-edition.aspx#wmi
0
 

Author Comment

by:antonioking
Comment Utility
Hi yo_bee!

Thanks for the reply, I have to disagree. Restructuring my AD certainly wouldn't be easier than creating a WMI filter for the GPO

Sure I could do that, but the policy needs to apply to all my workstations too.
I have multiple OUs for my workstations and only the workstations and citrix servers in 1 site should have the GPO applied.
0
 
LVL 21

Expert Comment

by:yo_bee
Comment Utility
Pretty sure that the link I posted should help or did you try that and it did not work?

Have you looked at http://sdmsoftware.com/gpoguy/free-tools/library/wmi-filter-validation-utility/
0
 

Author Comment

by:antonioking
Comment Utility
Hi yo_bee
Thanks for the guides, the first link does not achieve what I was hoping, since both classes must result to true.
I actually was hoping to get my WMI query to work if just one class query is true.
The Win32_OperatingSystem ProductType =1 OR the Win32_Director Name = C:\\Program Files (x86)\\Citrix\\XenApp

I have tried the validation filter but I don't actually have a WMI query to test yet... this is what I need help with.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 21

Accepted Solution

by:
yo_bee earned 500 total points
Comment Utility
I am not sure you can even do this?
What is this GPO going to do?
0
 

Author Comment

by:antonioking
Comment Utility
Install some software and some file GPPs
0
 
LVL 21

Assisted Solution

by:yo_bee
yo_bee earned 500 total points
Comment Utility
The GPP part is easy because you will be able to create multiple WMI with either being true, but the install may need to be scripted out using WMI in the script to see if the install can start.

Is it an MSI or EXE that has switches for a silent install?
0
 

Author Closing Comment

by:antonioking
Comment Utility
Hi yo_bee
The software is an MSI. I'll create a script to deploy the software and I'll modify the GPPs too.

Thanks
Antonio
0
 
LVL 21

Expert Comment

by:yo_bee
Comment Utility
Good luck and if you need assistance I will be still monitoring this thread
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
Synchronize a new Active Directory domain with an existing Office 365 tenant
Learn the basics of if, else, and elif statements in Python 2.7. Use "if" statements to test a specified condition.: The structure of an if statement is as follows: (CODE) Use "else" statements to allow the execution of an alternative, if the …
The viewer will learn how to look for a specific file type in a local or remote server directory using PHP.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now