[gptalk] Re: Using a WMI Filter instead of Site Policies

  • From: "Peacock, Adrian " <Adrian.Peacock@xxxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 10 Apr 2008 08:14:00 +0100

I changed the query to; 
 
Select * from Win32_NTDomain WHERE 
(DomainName = "DOMAIN" and ClientSiteName = "SITE1") OR 
(DomainName = "DOMAIN" and ClientSiteName = "SITE2") OR
(DomainName = "DOMAIN" and ClientSiteName = "SITE3")


This fixed the problem. There are lots of trusts to other forests, which
is why the long logon time did not show up in testing.
 
It is hard to see why anyone would use site policies when you can use a
WMI filter to do the same thing at the OU level
 
Thanks for all you advice
 
Adrian

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: 09 April 2008 15:43
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies



You might also try running my wmiftest  tool
(www.gpoguy.com/wmiftest.htm) using this filter against an existing
system to see how long that takes. 

Darren

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie R
Sent: Wednesday, April 09, 2008 7:34 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

Strange, it shouldn't take that long. How many domains are there in your
environment? If you just run SELECT * FROM Win32_NTDomain, how long does
that take?

Regards,

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Peacock, Adrian 
Sent: Wednesday, April 09, 2008 5:02 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

We have just deployed the following query, but it adds 4 minutes to the
logon time. I have checked the Userevn.log and there is nothing apart
from a 4 minute gap. I ran a VB script to check the site and it took 4
minutes to run. Is there any other WMI filter that can be used to find
the site?

Select * from Win32_NTDomain WHERE (ClientSiteName = "SITE1" OR
ClientSiteName = "SITE2" OR ClientSiteName = "SITE3")

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie R
Sent: 18 March 2008 14:59
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

Noticed the e-mail domain and kind of figured that was the case. J

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Smith, Brad 
Sent: Tuesday, March 18, 2008 9:56 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies

we are actually working through this together....

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie R
Sent: 18 March 2008 14:44
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Using a WMI Filter instead of Site Policies





Looks like a co-worker of yours has already brought this up in another
thread. See "User Hive settings set during logon..." for more detail.
The short story is that Win32_NTDomain should work if you also filter on
the caption attribute.

Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Peacock, Adrian 
Sent: Tuesday, March 18, 2008 7:33 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Using a WMI Filter instead of Site Policies

Is there any way of applying a policy for a site by WMI Filtering rather
than using a policy at the site level? I have tried a few things without
success

1) WMI Filters using Win32_NetworkAdapterConfiguration attributes - all
the useful attributes (ip address, default gateway, etc) are in arrays
and WQL does not handle arrays.

2) Script to change the registry settings deployed by group policy using
ADSystemInfo.SiteName - the script required admin rights to make changes
to the registry, but this also resulted in setting that end up tattooed
(they don't go away)!. Also this variable could not be used for a WMI
filter as it is AD and not WMI.

3) WMI Filter on Win32_NTDomain.ClientSiteName - this is a collection of
attributes, which starts with the local computer, then domain and
finally all trusted domains. When the WMI Filter is parsed the filter
ONLY looks at the first ClientSiteName which is the local computer site
and so always is false.







This email and any attached files are confidential and copyright
protected. If you are not the addressee, any dissemination of this
communication is strictly prohibited. Unless otherwise expressly agreed
in writing, nothing stated in this communication shall be legally
binding. 

The ultimate parent company of the Atkins Group is WS Atkins plc.
Registered in England No. 1885586. Registered Office Woodcote Grove,
Ashley Road, Epsom, Surrey KT18 5BW. A list of wholly owned Atkins Group
companies registered in the United Kingdom can be found at:
http://www.atkinsglobal.com/terms_and_conditions/index.aspx.
<http://www.atkinsglobal.com/terms_and_conditions/index.aspx>  

P Consider the environment. Please don't print this e-mail unless you
really need to. 

This message has been scanned for viruses by MailControl
<http://bluepages.wsatkins.co.uk/?6875772> 

________________________________

This e-mail may contain identifiable health information that is subject
to protection under state and federal law. This information is intended
to be for the use of the individual named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited and may be
punishable by law. If you have received this electronic transmission in
error, please notify us immediately by electronic mail (reply). 

________________________________

This email and any attached files are confidential and copyright
protected. If you are not the addressee, any dissemination of this
communication is strictly prohibited. Unless otherwise expressly agreed
in writing, nothing stated in this communication shall be legally
binding. 

The ultimate parent company of the Atkins Group is WS Atkins plc.
Registered in England No. 1885586. Registered Office Woodcote Grove,
Ashley Road, Epsom, Surrey KT18 5BW. A list of wholly owned Atkins Group
companies registered in the United Kingdom can be found at:
http://www.atkinsglobal.com/terms_and_conditions/index.aspx.
<http://www.atkinsglobal.com/terms_and_conditions/index.aspx>  

P Consider the environment. Please don't print this e-mail unless you
really need to. 

This message has been scanned for viruses by MailControl
<http://bluepages.wsatkins.co.uk/?6875772> 

________________________________

This e-mail may contain identifiable health information that is subject
to protection under state and federal law. This information is intended
to be for the use of the individual named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited and may be
punishable by law. If you have received this electronic transmission in
error, please notify us immediately by electronic mail (reply). 

________________________________

This email and any attached files are confidential and copyright
protected. If you are not the addressee, any dissemination of this
communication is strictly prohibited. Unless otherwise expressly agreed
in writing, nothing stated in this communication shall be legally
binding. 

The ultimate parent company of the Atkins Group is WS Atkins plc.
Registered in England No. 1885586. Registered Office Woodcote Grove,
Ashley Road, Epsom, Surrey KT18 5BW. A list of wholly owned Atkins Group
companies registered in the United Kingdom can be found at:
http://www.atkinsglobal.com/terms_and_conditions/index.aspx.
<http://www.atkinsglobal.com/terms_and_conditions/index.aspx>  

P Consider the environment. Please don't print this e-mail unless you
really need to. 

________________________________

This e-mail may contain identifiable health information that is subject
to protection under state and federal law. This information is intended
to be for the use of the individual named above. If you are not the
intended recipient, be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited and may be
punishable by law. If you have received this electronic transmission in
error, please notify us immediately by electronic mail (reply). 



This message has been scanned for viruses by MailControl
<http://bluepages.wsatkins.co.uk/?6875772> 



This email and any attached files are confidential and copyright protected. If 
you are not the addressee, any dissemination of this communication is strictly 
prohibited. Unless otherwise expressly agreed in writing, nothing stated in 
this communication shall be legally binding.

The ultimate parent company of the Atkins Group is WS Atkins plc.  Registered 
in England No. 1885586.  Registered Office Woodcote Grove, Ashley Road, Epsom, 
Surrey KT18 5BW. A list of wholly owned Atkins Group companies registered in 
the United Kingdom can be found at 
http://www.atkinsglobal.com/terms_and_conditions/index.aspx

Consider the environment. Please don't print this e-mail unless you really need 
to.

Other related posts: