Group Policy Preferences IP Address Range Targeting

Good afternoon,

When applying IP Address Range Targeting to a Group Policy Preference does it reference all network adapters? E.g. if I have a machine with Ethernet IP and Wi-Fi IP and the GPP should only apply to machines with IP, will it apply?


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Thomas GrassiSystems AdministratorCommented:
You need to setup a WMI filter

add this to the filter

SELECT * from Win32_IP4RouteTable
       WHERE ((Mask='' AND NextHop LIKE '10.31.%'))

hope this helps
Barnardos_2LSAuthor Commented:
Hi. Thanks for your response. What I want to know at this stage is without a WMI filter and only using IP Address Range Targeting will the GPP apply?
Thomas GrassiSystems AdministratorCommented:
Are the machines on the network on the same domain? or they just guests?

If on the same domain they will get the GPO policy

That is why you need a WMI filter setup
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

Barnardos_2LSAuthor Commented:
How can I configure a WMI filter so that it applies only if is present on a NIC and not if both and are present?
Thomas GrassiSystems AdministratorCommented:
From gpedit.msc

expand your domain

you will see wmi filters

select new  to create a new wmi filter

call it a useful name

in the query add this
SELECT * from Win32_IP4RouteTable
        WHERE ((Mask='' AND NextHop LIKE '10.10.%'))

Then assign to the GPO you use
Barnardos_2LSAuthor Commented:
Thanks however this will still apply regardless of whether the second NIC has an IP. I need a WMI filter that is essentially -

If NIC1 IP is 10.10.10.%
AND NIC2 IP is not 20.20.20.%
Thomas GrassiSystems AdministratorCommented:
you can add this to the query

select name from win32_computersystem where name like "test"

You can select one computer to test with
Barnardos_2LSAuthor Commented:
Unfortunately this doesn't help. I need a real time WMI filter that applies to multiple machines potentially with two NICs.
Thomas GrassiSystems AdministratorCommented:
Ok lets try this

Select * FROM Win32_IP4RouteTable
WHERE NOT ((Mask='0.0.00' AND NextHop='10.10.10.* AND NEXTHop='20.20.20.*'))

If a computer does not match this then the GPO will apply
Barnardos_2LSAuthor Commented:
Configured AD sites and linked the policy to the site rather than OU.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Barnardos_2LSAuthor Commented:
Self resolved.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.