I would usually just set that in the local GPO on the PDCE so you don't have to mess with a WMI filter. You only need to do it on one box basically, so there is really no need to create a domain GPO. Although I understand your point about the PDCE role moving, how often does that really happen? Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon Energy | Work: 405.552.8054 | http://www.dvn.com <http://www.dvn.com/> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Crosby, Damian (IT) Sent: Wednesday, June 18, 2008 11:41 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] WMI Filtering PDCE NTP Settings Does anyone use a GPO to control time settings (source NTP servers amongst others)? Further to ensure that settings are applied in the event of the FSMO PDCE role being moved does anyone filter using WMI to ensure its applied to only the PDCE? eg: select * from Win32_ComputerSystem where DomainRole = 5 Thanks! ________________________________ NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error. Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.