[gptalk] Re: GPO Filters

Craig

 

Your easiest way may be to run a WMI filter to check for "not servers" and
have a "DENY" group called "2000 Servers".

 

This means the WMI filter will catch your 2003 servers, and you will have to
manually add the 2000 servers to the "2000 servers"  group so that they
don't get the policy either.

 

Alan Cuthbertson

 

 

 Policy Management Software:-

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml

 

ADM Template Editor:-

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml

 

Policy Log Reporter(Free)

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml

 

 

 

 

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Friday, 25 May 2007 11:19 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: GPO Filters

 

Win2K does not understand WMI filters at all, so it will process the GPO
regardless of what you put in the filter if its in a container where the GPO
is linked.

 

Darren

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Thursday, May 24, 2007 6:12 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: GPO Filters

 

Sorry, hit sent before I wanted.....

 

Can I just use the filter below and add Windows 2000 Professional to it so
the GO only runs against machines that have Windows 2000 Pro or XP on them?

 

Root\CimV2; Select * from Win32_OperatingSystem where Caption = "Microsoft
Windows XP Professional"

Thanks.
Craig

 

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Thursday, May 24, 2007 9:09 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] GPO Filters

I have a GPO I want to run all my machines except machines running "server".
Is creating a GPO WMI filter and linking it to the GPO the easiest way to
accomplish this? I know filters will not apply to machines running Windows
2000 (Or so I read) the GO would run anyway, and some machines are running
2000 Server so would be the best way to have this GO not run against and
ever changing list of host running some version of 'Server"

Thanks for your opinions 

Craig M. Buonora

Other related posts: