Actually you can check for IE settings with WMI but you need to use another namespace than the commonly used root\CIMV2 namespace, namely : root\CIMV2\Applications\MicrosoftIE and the WQL query would look something like this: SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE "6%" I just noted that this namespace does not exist on my Vista box when I was going to hit WBEMTEST with it, but I know it does on XP/2003 and since Vista comes with IE7 this is not a problem here since it will return 0 hits, i.e. false, if it fails to connect to the namespace and thus the test will be valid on a Vista too since there is no IE6 on Vista, although your additional XP/2003 test would take care of that anyway. I believe Darren have a tool on the GPOGUY web site that lets you test WMI Filters that you can use to verify my syntax on a XP/2003 box unless you like the torture yourself with WBEMTEST :) Justin, do you need help with the other two as well, or was the IE6 WQL the one were wondering about, since that one is pretty tricky? HTH, Thorbjörn Sjövold Special Operations Software www.specopssoft.com <http://www.specopssoft.com/> thorbjorn.sjovold a t specopssoft.com Download our free tool for remote Gpupdate with graphical reporting, http://www.specopssoft.com/products/specopsgpupdate/ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Nelson, Jamie R Contr 72 CS/SCBNF Sent: den 12 mars 2007 19:53 To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: WMI Filter I don't think you can write a filter to look for IE6. You would be better off scripting out those checks before installing a patch. //signed// Jamie R Nelson Systems Engineer Ingenium Corporation 72 CS/SCBNF 405.739.2811 (DSN 339) ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Salandra, Justin A. Sent: Monday, March 12, 2007 1:36 PM To: ActiveDir@xxxxxxxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx Subject: [gptalk] WMI Filter How would you create az WMI Filter to accomplish all of this * Internet Explorer 6 * Security update 918899 * Windows XP SP2 or Windows Server 2003 SP1 I want to install a patch but it requires that all the three exist first Justin A. Salandra MCSE Windows 2000 and 2003 Network and Technology Services Manager Catholic Health Care System 646.505.3681 cell 917.455.0110 jasalandra@xxxxxxxxxxx