How to configure WMI filters for Group Policy to better manage your Windows clients


Buy Organic Traffic | Cheap Organic Traffic | Increase Organic Traffic | Organic Traffic

Utilizing the Home windows Administration Infrastructure framework, Home windows admins can create filters that apply GPOs in artistic methods to supply extra granularity over system administration in Energetic Listing.

Businessman explaining the plan

Picture: iStockphoto/BongkarnThanyakij

Admins tasked with managing Home windows purchasers of all sizes have lengthy identified the virtues of implementing Group Coverage to handle software program and safety settings to lock down units on company networks. The pliability of with the ability to centrally handle purchasers by making use of insurance policies to units joined to an Energetic Listing (AD) area permits IT professionals to get as holistic or granular of their administration of units as vital.

Because of their intertwined nature, a lot of the how, when, and why insurance policies get utilized will rely upon the design construction of the AD schema and the way units are saved throughout the organizational items. Nonetheless, regardless of our greatest efforts, admins at one time or one other encounter eventualities that require a setup that the prevailing design construction doesn’t permit for. Different occasions—corresponding to in bigger forests—insurance policies might solely must be deployed to all units that meet particular necessities with others that don’t meet these necessities, successfully ignoring such a coverage.

For cases corresponding to these, or people who require a bit extra granularity when deploying to focused techniques or teams of techniques, a Home windows Administration Instrumentation (WMI) filter can be your most suitable option. By making a custom-made filter and assigning it to a number of insurance policies, this may make sure that the respective insurance policies will solely act upon units assembly the standards expressly stipulated within the filter—no matter the place that coverage is linked throughout the hierarchy.

SEE: How to decide on between Home windows, macOS, and Linux (free PDF) (TechRepublic)

Beneath I’ve illustrated just a few eventualities the place WMI filters function an efficient method with which to deploy a coverage to a focused group of units with minimal administrative effort. Moreover, as soon as WMI filters have been created, they are often accessed and reused as wanted.

Necessities for creating our customized filters

Server working Home windows Server 2008 R2 or later and the next roles:

  • Energetic Listing Area Companies
  • PC working Home windows 7 or later
  • Distant Server Administration Instruments for Home windows
  • Area Admin credentials

Tips on how to create a filter that targets 64-bit OSs solely

  1. Launch the Group Coverage Administration Console (GPMC). Change the area controller (if vital) that you just want to create the WMI filter on. Increase the Domains | Area title | WMI Filters nodes.
  2. Proper-click the foundation of the WMI Filters node, then click on New from the context menu to deliver up the window to create a brand new filter.
  3. Within the Identify textual content field, enter a descriptive title of what the aim of the filter is. Moreover, within the Description textual content field, it’s possible you’ll optionally enter a extra detailed description of what actions the WMI filter will present.
  4. Click on the Add button to populate the Namespace entry. By default, the rootCIMv2 namespace can be added. Relying on the meant motion of the WMI filter, this may occasionally or might not change. For the needs of this train, let’s depart it as is.
  5. We can be modifying the question that’s the logic that can be run towards the namespace to create our filtering functionality. On this case, within the Question textual content field, enter the next question:
choose * from Win32_OperatingSystem the place OSArchitecture = "64-Bit"

6. Click on the OK button to save lots of the question, then click on the Save button to save lots of the filter.

Tips on how to create a filter that targets Server OSs solely

1. Comply with steps 1-Four for making a filter that targets 64-bit OSs solely (above). Enter the next question:

choose * Win32_OperatingSystem the place Model like "" and ProductType ="three"

2. Click on the OK button to save lots of the question, then click on the Save button to save lots of the filter.

Tips on how to create a filter that targets a particular make/mannequin pc solely

1. Comply with steps 1-Four within the earlier part. Enter the next question:

choose * Win32_ComputerSystem the place Producer = "Hewlett-Packard" and Mannequin = "HP ProBook 640 G2" or Mannequin = "HP ProBook 640 G3"

2. Click on the OK button to save lots of the question, then click on the Save button to save lots of the filter.

Tips on how to apply WMI filters to Group Coverage Objects (GPOs)

  1. From the GPMC, navigate to an OU the place you will have the specified GPO linked.
  2. Click on on the GPO to view its properties. Underneath the Scope tab, scroll all the way down to the underside of the window underneath the WMI Filtering headline.
  3. By default, the drop-down menu needs to be set to <None>. Click on on it to disclose any WMI Filters which were created for that area and choose the filter you want to add to the coverage to allow it.

When you get the cling of making filters and making use of them to carry out particular duties on focused techniques, you possibly can start to hyperlink and chain WMI queries collectively to type granular filters that drill all the way down to particular units for practically limitless administration scoping capabilities.

Additionally see

Buy Website Traffic | Cheap Website Traffic | Increase Website Traffic | Website Traffic

Source link