We used an ADSI script (running as a scheduled task) that reads the caption from the AD object, and puts them in a group (actually nested groups so as to manage group membership limitations). Those groups are then denied GPO's they are not supposed to receive. Doug Delaney GM Desktop Engineering Global Client Engineering GM 1075 W. Entrance Dr., MS 2B, Cube 2130 Auburn Hills, MI 48326 Lab: 248-365-9187 Tel: 248-754-7917 Pg: 248-870-0306 pager Mail: Doug.Delaney@xxxxxxx Note: The information in this email is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it is prohibited. -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Buonora, Craig (GE, Research, consultant) Sent: Wednesday, January 31, 2007 2:30 PM To: gptalk@xxxxxxxxxxxxx Cc: Salandra, Justin A. Subject: [gptalk] Re: Help with WMI Filter I am probably asking this incorrectly, how can I apply a GPO to only Windows 2000 machines [the OU I am attaching this to only has machines running 2000 Server not Pro, and 2003]. Thanks, Craig -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of jfvanmeter@xxxxxxxxxxx Sent: Wednesday, January 31, 2007 2:02 PM To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx Cc: Salandra, Justin A. Subject: [gptalk] Re: Help with WMI Filter Hello everyone, WMI Filters are supported on Windows XP and Windows Server 2003. Since they are not supported on Windows 2000, any WMI Filter associated with a GPO is ignored on this platform and the GPO is applied. Take Care --John -------------- Original message ---------------------- From: "Salandra, Justin A." <jasalandra@xxxxxxxxxxx> > I am trying to create a WMI Filter so that only computers that match > this filter will apply the policy. > > > > My thought process here is to query the OS Caption = Windows 2000 > Professional, this way Windows XP and Windows 2003 computers will not > bother to apply the policy and since Windows 2000 computers ignore WMI > Filters anyway then it would only apply to those that I want it to > apply to. > > > > When I try to create the WMI Script, when I click on save I get an > error message that says "a syntax error occurred trying to evaluate a > query string". > > > > I have pasted the script below. I created this script using a WMI > Code Creator that I downloaded off the Web. Can anyone help? > > > > > > > > > > strComputer = "." > > Set objWMIService = GetObject("winmgmts:\\" & strComputer & > "\root\CIMV2") > > Set colItems = objWMIService.ExecQuery( _ > > "SELECT * FROM Win32_OperatingSystem WHERE Caption = 'Microsoft > Windows 2000 Professional'",,48) > > For Each objItem in colItems > > Wscript.Echo "-----------------------------------" > > Wscript.Echo "Win32_OperatingSystem instance" > > Wscript.Echo "-----------------------------------" > > Wscript.Echo "Caption: " & objItem.Caption > > Next > > > > Justin A. Salandra > > MCSE Windows 2000 & 2003 > > Network and Technology Services Manager > > Catholic Healthcare System > > 646.505.3681 - office > > 917.455.0110 - cell > > jasalandra@xxxxxxxxxxx <mailto:jasalandra@xxxxxxxxxxx> > > > > *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************