[gptalk] Re: WMI Filter - problem with properties "array of string"

  • From: Sylvain <gpo@xxxxxxxxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Mon, 25 Jun 2007 13:43:45 +0200

Hi,

Sorry to come back soo late ... :-P

The solution I put in production is the one to told me. The WMI filter I put in place is the following :

SELECT * FROM Win32_IP4RouteTable WHERE Name = "x.x.x.x" AND Mask = "255.255.0.0" or Name = 
"x.x.x.x" AND Mask = "255.255.0.0"


This filter make me sure that only the right workstation applied the GPO.

Because I also by sure that I have to restricted the user population on the machine, I 
put an analytical group where all user are located in the "Security Filtering" 
of the GPO.

Once again Thorbjörn, thanks for your help

Regards,
Sylvain







Thorbjörn Sjövold wrote:
Sylvain,

Unfortunately you cannot query on array types with only WQL, and it's "by 
design" and you have to use programming logic to access the arrays, which of course 
makes them useless as WMI filters, but I've seen a workaround that I've tweaked somewhat, 
although I have not tried myself in a live environment, that perhaps can help you out 
here. For example if you want to get the subnet 10.1.1.255 you could use the following:

SELECT * FROM Win32_IP4RouteTable WHERE Name LIKE "10.1.1.%" AND Mask = 
"255.255.255.255"

The Name property contains the destination, I guess you can use the Destination 
property too, and since all computers have their own IP as a destination in the 
routing table, this will hit them, using the Mask property will reduce the risk 
of hitting a static defined route. Again I have not used it myself, we even 
added custom targeting to our own products just to get around problems like 
this, but I suppose it could work if you are not to broad in your targeting and 
do not have static routes defined on your computers since that could 
potentially mess this up... Also there could be other network configs that 
could prevent this from working, but my general guess is that it works fine in 
most situations.

If it works fine, please ping back here and tell us about it and we'll all learn something new :)
HTH,

Thorbjörn Sjövold
Special Operations Software
www.specopssoft.com
thorbjorn.sjovold a t specopssoft.com
Download our free tool for remote Gpupdate with graphical reporting,
http://www.specopssoft.com/products/specopsgpupdate/





-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Sylvain
Sent: den 23 april 2007 18:44
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] WMI Filter - problem with properties "array of string"

Hi All,

If have trouble creating a WMI filter based on the "Win32_NetworkAdapterConfiguration" class

If I check a property with only one value (for example de DNShostname) it works

But if I try to retrieve the client IP or an other property set as "array of string" I can't set the WQL request.

Any idea ?
I only need to have a WMI filter base on : ClientIP or ClientSubnet or ClientDefaultGateway

Thanks,
Sylvain
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: