That explains it all... I managed to figure out a solution which worked well last night, I have only one application that needs special treatment, so I created a duplicate WSUS GPO for the special case, altered its wsus targeted group, set it to enforced to make sure it wins when getting applied and used the first filter. Now comps w/o get the original GPO, and these special case computers get theirs applied over top. Not very scalable but if it gets more complicated I will just deal with it an OU level by splitting stuff up.
Thanks for the insight! jlc From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Wednesday, February 11, 2009 2:58 AM To: NT System Admin Issues Subject: Re: WMI Filter Help Joseph- The second filter most likely won't do what you're expecting. While the first filter will produce 1 or 0 matching rows, the second filter will produce N or N-1 matching rows, depending on if Folder is found or not. N will be the total number of directories. This means that the second filter will always evalutate to true unless the wmi query times out. Generally WMI filters aren't capable of handing the NOT-case. You wont get a truth value for something that doesn't match. Your case would also require a subquery, something that WQL does not handle. You'll have to put this one in a script (or GPP if it can handle what you want). -Anders On Tue, Feb 10, 2009 at 6:48 PM, Joseph L. Casale <jcas...@activenetwerx.com<mailto:jcas...@activenetwerx.com>> wrote: I created two filters: Select * from Win32_Directory Where Filename = 'C:\\Program Files\\Folder' Select * from Win32_Directory Where Filename <> 'C:\\Program Files\\Folder' and set two gpo's to apply based on this. For some reason, all the machines evaluate positive and falsely for both and switch constantly for one combination to another? What's up with that? Anyone got any ideas? I was going to search Win32_Product for the msi, but it apparently didn't install via msi so looking for this folder seems to be the best option... Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
