asked on

Can a GPO WMI filter to filter by O/S work when applied to a User OU

Hiya,

I have a GPO which has just user settings in for setting Internet options which apply to an OU containing users. On the GPO I have the following filter to target Win7, Win 8 and Win 8.1 only

select * from Win32_OperatingSystem where (Version like "6.1%" or Version like "6.2%" or Version like "6.3%") and ProductType = "1"

My question is, because this is applied to a User OU, will the WMI filter work?

Many Thanks

albatros99

If you link the filtered GPO to an OU that contains only user objects, then it will not apply.

ASKER CERTIFIED SOLUTION

McKnife

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

FarWest

the documentation did not say it is restricted to computers in OU or security groups,
look at it as a condition that test environment before appealing GPO, the scope is not limited to users

so it should work,

Mohammed Khawaja

If the GPO is User OU then it will be applied running under the user context and it will work.

DrAtomic

Shall I chip in and say maybe? (taking a stab at McKnife and albatros99 here).

I know for a fact that get-wmiobject is used against the computer; so that might be disregarded on a user object only ou.

I would do a simple test in your testlab, especially in light of the conflicting answers.

rhiancohen

ASKER

OK I have some done some testing on a Windows 8 VM. The policy is applied to an OU which just contains the User that's logging into this VM. It seems to work and I have run the Group Policy Results Wizard at the bottom of GPMC which came back that the filter was being applied (Eg. It equals True) which is good.

Seth Simmons

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.