[gptalk] Re: Using a WMI Filter instead of Site Policies

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Wed, 9 Apr 2008 07:43:24 -0700

You might also try running my wmiftest  tool (www.gpoguy.com/wmiftest.htm)
using this filter against an existing system to see how long that takes. 

 

Darren

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nelson, Jamie R
Sent: Wednesday, April 09, 2008 7:34 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

 

Strange, it shouldn't take that long. How many domains are there in your
environment? If you just run SELECT * FROM Win32_NTDomain, how long does
that take?

 

Regards,

 

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Peacock, Adrian 
Sent: Wednesday, April 09, 2008 5:02 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

 

We have just deployed the following query, but it adds 4 minutes to the
logon time. I have checked the Userevn.log and there is nothing apart from a
4 minute gap. I ran a VB script to check the site and it took 4 minutes to
run. Is there any other WMI filter that can be used to find the site?

 

Select * from Win32_NTDomain WHERE (ClientSiteName = "SITE1" OR
ClientSiteName = "SITE2" OR ClientSiteName = "SITE3")

 

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nelson, Jamie R
Sent: 18 March 2008 14:59
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

 

Noticed the e-mail domain and kind of figured that was the case. J

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Smith, Brad 
Sent: Tuesday, March 18, 2008 9:56 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

we are actually working through this together....

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nelson, Jamie R
Sent: 18 March 2008 14:44
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies





Looks like a co-worker of yours has already brought this up in another
thread. See "User Hive settings set during logon." for more detail. The
short story is that Win32_NTDomain should work if you also filter on the
caption attribute.

Jamie Nelson | Systems Engineer | Systems Support, Information Technology |
I N T E G R I S Health | Phone 405.552.0903 | Fax 405.553.5687 |
<http://www.integrisok.com/> http://www.integrisok.com

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Peacock, Adrian 
Sent: Tuesday, March 18, 2008 7:33 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Using a WMI Filter instead of Site Policies

Is there any way of applying a policy for a site by WMI Filtering rather
than using a policy at the site level? I have tried a few things without
success

1) WMI Filters using Win32_NetworkAdapterConfiguration attributes - all the
useful attributes (ip address, default gateway, etc) are in arrays and WQL
does not handle arrays.

2) Script to change the registry settings deployed by group policy using
ADSystemInfo.SiteName - the script required admin rights to make changes to
the registry, but this also resulted in setting that end up tattooed (they
don't go away)!. Also this variable could not be used for a WMI filter as it
is AD and not WMI.

3) WMI Filter on Win32_NTDomain.ClientSiteName - this is a collection of
attributes, which starts with the local computer, then domain and finally
all trusted domains. When the WMI Filter is parsed the filter ONLY looks at
the first ClientSiteName which is the local computer site and so always is
false.







This email and any attached files are confidential and copyright protected.
If you are not the addressee, any dissemination of this communication is
strictly prohibited. Unless otherwise expressly agreed in writing, nothing
stated in this communication shall be legally binding. 

The ultimate parent company of the Atkins Group is WS Atkins plc. Registered
in England No. 1885586. Registered Office Woodcote Grove, Ashley Road,
Epsom, Surrey KT18 5BW. A list of wholly owned Atkins Group companies
registered in the United Kingdom can be found at:
http://www.atkinsglobal.com/terms_and_conditions/index.aspx.
<http://www.atkinsglobal.com/terms_and_conditions/index.aspx>  

P Consider the environment. Please don't print this e-mail unless you really
need to. 

This message has been scanned for viruses by MailControl
<http://bluepages.wsatkins.co.uk/?6875772> 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

  _____  

This email and any attached files are confidential and copyright protected.
If you are not the addressee, any dissemination of this communication is
strictly prohibited. Unless otherwise expressly agreed in writing, nothing
stated in this communication shall be legally binding. 

The ultimate parent company of the Atkins Group is WS Atkins plc. Registered
in England No. 1885586. Registered Office Woodcote Grove, Ashley Road,
Epsom, Surrey KT18 5BW. A list of wholly owned Atkins Group companies
registered in the United Kingdom can be found at:
http://www.atkinsglobal.com/terms_and_conditions/index.aspx.
<http://www.atkinsglobal.com/terms_and_conditions/index.aspx>  

P Consider the environment. Please don't print this e-mail unless you really
need to. 

 

This message has been scanned for viruses by
<http://bluepages.wsatkins.co.uk/?6875772> MailControl

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

  _____  

 

This email and any attached files are confidential and copyright protected.
If you are not the addressee, any dissemination of this communication is
strictly prohibited. Unless otherwise expressly agreed in writing, nothing
stated in this communication shall be legally binding. 

The ultimate parent company of the Atkins Group is WS Atkins plc. Registered
in England No. 1885586. Registered Office Woodcote Grove, Ashley Road,
Epsom, Surrey KT18 5BW. A list of wholly owned Atkins Group companies
registered in the United Kingdom can be found at:
http://www.atkinsglobal.com/terms_and_conditions/index.aspx.
<http://www.atkinsglobal.com/terms_and_conditions/index.aspx>  

P Consider the environment. Please don't print this e-mail unless you really
need to. 

 

  _____  

This e-mail may contain identifiable health information that is subject to
protection under state and federal law. This information is intended to be
for the use of the individual named above. If you are not the intended
recipient, be aware that any disclosure, copying, distribution or use of the
contents of this information is prohibited and may be punishable by law. If
you have received this electronic transmission in error, please notify us
immediately by electronic mail (reply). 

Other related posts: