RE: WMI filter help
I am not going to be able to help you skin it the way you want via IP. But maybe some alternatives that come to mind may get you where you are going. Use security filtering on the GPO and only give that specific machine rights to that GPO. So on the scope tab of GPM modify the Security filtering area to only include that machine. Or maybe Item level targeting will help you, although I have never used that. Both are discussed here: http://blogs.technet.com/b/grouppolicy/archive/2009/07/30/security-filtering-wmi-filtering-and-item-level-targeting-in-group-policy-preferences.aspx From: Jeff Brown [mailto:jbr...@webcoindustries.com] Sent: Thursday, December 08, 2011 2:54 PM To: NT System Admin Issues Subject: WMI filter help I am trying to create a WMI filter to apply a GPO to a specific IP address. I have been googling and am so far not able to find anything dumbed down enough for me to copy/paste modify and get to work. There is one existing WMI filter here that applies a range of subnets. I have tried modifying that existing filter to point only to the server I am trying to apply the GPO to, it looks like this: Select * FROM Win32_IP4RouteTable WHERE ((Mask='255.255.255.255' AND NextHop='127.0.0.1' OR NextHop='0.0.0.0') AND (Destination Like '10.3..61.1' ) ) Anyone care to offer suggestions or resources? W2k8 R2 server environment. I simply need to create a WMI filter for a GPO that applies to the server at internal address: 10.3.61.1. may need to add others later, but for now the one will do. Thank for any help. Jeff Brown IT Operations Webco Industries (918) 246-2455 This email and any attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error please notify the sender immediately. All inquiries, quotations, purchase orders, acknowledgments, invoices or other documents memorializing offers, acceptances or contractual obligations are subject to Webco's standard terms and conditions of sale (when Webco is the seller, www.webcoindustries.com/tcsales.aspxhttp://www.webcoindustries.com/tcsales.aspx) or purchase (when Webco is the buyer, www.webcoindustries.com/tcpurchase.aspxhttp://www.webcoindustries.com/tcpurchase.aspx). Webco manufactures tubular products to meet customer dimensional and materials specifications. Webco is not an engineering or design business. Any engineering information provided is purely incidental to the tube manufacturing process and not offered or intended to be engineering services related to the performance specifications a customer may require, which is the customer's responsibility to determine. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help
I am not going to be able to help you skin it the way you want via IP. But maybe some alternatives that come to mind may get you where you are going. Use security filtering on the GPO and only give that specific machine rights to that GPO. So on the scope tab of GPM modify the Security filtering area to only include that machine. Since you mention additional machines later on...I would make a group for this and add the one machine to that group. Then later you add more machines to the group. Or maybe Item level targeting will help you, although I have never used that. Both are discussed here: http://blogs.technet.com/b/grouppolicy/archive/2009/07/30/security-filtering-wmi-filtering-and-item-level-targeting-in-group-policy-preferences.aspx From: Jeff Brown [mailto:jbr...@webcoindustries.com] Sent: Thursday, December 08, 2011 2:54 PM To: NT System Admin Issues Subject: WMI filter help I am trying to create a WMI filter to apply a GPO to a specific IP address. I have been googling and am so far not able to find anything dumbed down enough for me to copy/paste modify and get to work. There is one existing WMI filter here that applies a range of subnets. I have tried modifying that existing filter to point only to the server I am trying to apply the GPO to, it looks like this: Select * FROM Win32_IP4RouteTable WHERE ((Mask='255.255.255.255' AND NextHop='127.0.0.1' OR NextHop='0.0.0.0') AND (Destination Like '10.3..61.1' ) ) Anyone care to offer suggestions or resources? W2k8 R2 server environment. I simply need to create a WMI filter for a GPO that applies to the server at internal address: 10.3.61.1. may need to add others later, but for now the one will do. Thank for any help. Jeff Brown IT Operations Webco Industries (918) 246-2455 This email and any attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error please notify the sender immediately. All inquiries, quotations, purchase orders, acknowledgments, invoices or other documents memorializing offers, acceptances or contractual obligations are subject to Webco's standard terms and conditions of sale (when Webco is the seller, www.webcoindustries.com/tcsales.aspx) or purchase (when Webco is the buyer, www.webcoindustries.com/tcpurchase.aspx). Webco manufactures tubular products to meet customer dimensional and materials specifications. Webco is not an engineering or design business. Any engineering information provided is purely incidental to the tube manufacturing process and not offered or intended to be engineering services related to the performance specifications a customer may require, which is the customer's responsibility to determine. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help
Umm... Look at the bottom line: AND (Destination Like '10.3..61.1' ) ) You have one too many periods between 3 and 61. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE From: Jeff Brown [mailto:jbr...@webcoindustries.com] Sent: Thursday, December 08, 2011 2:53 PM To: NT System Admin Issues Subject: WMI filter help I am trying to create a WMI filter to apply a GPO to a specific IP address. I have been googling and am so far not able to find anything dumbed down enough for me to copy/paste modify and get to work. There is one existing WMI filter here that applies a range of subnets. I have tried modifying that existing filter to point only to the server I am trying to apply the GPO to, it looks like this: Select * FROM Win32_IP4RouteTable WHERE ((Mask='255.255.255.255' AND NextHop='127.0.0.1' OR NextHop='0.0.0.0') AND (Destination Like '10.3..61.1' ) ) Anyone care to offer suggestions or resources? W2k8 R2 server environment. I simply need to create a WMI filter for a GPO that applies to the server at internal address: 10.3.61.1. may need to add others later, but for now the one will do. Thank for any help. Jeff Brown IT Operations Webco Industries (918) 246-2455 This email and any attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error please notify the sender immediately. All inquiries, quotations, purchase orders, acknowledgments, invoices or other documents memorializing offers, acceptances or contractual obligations are subject to Webco's standard terms and conditions of sale (when Webco is the seller, www.webcoindustries.com/tcsales.aspxhttp://www.webcoindustries.com/tcsales.aspx) or purchase (when Webco is the buyer, www.webcoindustries.com/tcpurchase.aspxhttp://www.webcoindustries.com/tcpurchase.aspx). Webco manufactures tubular products to meet customer dimensional and materials specifications. Webco is not an engineering or design business. Any engineering information provided is purely incidental to the tube manufacturing process and not offered or intended to be engineering services related to the performance specifications a customer may require, which is the customer's responsibility to determine. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help
Not what I wanted, but you are right, that works. Thanks heaps and gobs. ;) NEXT. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Thursday, December 08, 2011 2:28 PM To: NT System Admin Issues Subject: RE: WMI filter help I am not going to be able to help you skin it the way you want via IP. But maybe some alternatives that come to mind may get you where you are going. Use security filtering on the GPO and only give that specific machine rights to that GPO. So on the scope tab of GPM modify the Security filtering area to only include that machine. Since you mention additional machines later on...I would make a group for this and add the one machine to that group. Then later you add more machines to the group. Or maybe Item level targeting will help you, although I have never used that. Both are discussed here: http://blogs.technet.com/b/grouppolicy/archive/2009/07/30/security-filtering-wmi-filtering-and-item-level-targeting-in-group-policy-preferences.aspx From: Jeff Brown [mailto:jbr...@webcoindustries.com] Sent: Thursday, December 08, 2011 2:54 PM To: NT System Admin Issues Subject: WMI filter help I am trying to create a WMI filter to apply a GPO to a specific IP address. I have been googling and am so far not able to find anything dumbed down enough for me to copy/paste modify and get to work. There is one existing WMI filter here that applies a range of subnets. I have tried modifying that existing filter to point only to the server I am trying to apply the GPO to, it looks like this: Select * FROM Win32_IP4RouteTable WHERE ((Mask='255.255.255.255' AND NextHop='127.0.0.1' OR NextHop='0.0.0.0') AND (Destination Like '10.3..61.1' ) ) Anyone care to offer suggestions or resources? W2k8 R2 server environment. I simply need to create a WMI filter for a GPO that applies to the server at internal address: 10.3.61.1. may need to add others later, but for now the one will do. Thank for any help. Jeff Brown IT Operations Webco Industries (918) 246-2455 This email and any attachments transmitted with it are confidential and intended solely for the use of the addressee. If you have received this email in error please notify the sender immediately. All inquiries, quotations, purchase orders, acknowledgments, invoices or other documents memorializing offers, acceptances or contractual obligations are subject to Webco's standard terms and conditions of sale (when Webco is the seller, www.webcoindustries.com/tcsales.aspx) or purchase (when Webco is the buyer, www.webcoindustries.com/tcpurchase.aspx). Webco manufactures tubular products to meet customer dimensional and materials specifications. Webco is not an engineering or design business. Any engineering information provided is purely incidental to the tube manufacturing process and not offered or intended to be engineering services related to the performance specifications a customer may require, which is the customer's responsibility to determine. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help (SOLVED SORTA)
Hmmm, according to google a WMI queries cannot contain multiple classes. Bummer, but not a big deal I will just do two GPO's. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 3:10 PM To: NT System Admin Issues Subject: WMI filter help I think what I have put together, that won't work, will explain pretty well what I want. I want all the Win7 machines and any machine whose name starts with R2. I have tried many iterations of the syntax and a fair amount of googling. I would also gladly accept any pointers on resources for syntax, preferably with examples. SELECT * (FROM Win32_OperatingSystem WHERE Version LIKE '6.1.%') OR SELECT * (FROM Win32_ComputerSystem WHERE Name LIKE 'R2%') ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help (SOLVED SORTA)
What happened to queuing your messages in the outbox for a few minutes? :) Glad you found that. I was just looking for where that was documented. Now I don't have to. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 2:31 PM To: NT System Admin Issues Subject: RE: WMI filter help (SOLVED SORTA) Hmmm, according to google a WMI queries cannot contain multiple classes. Bummer, but not a big deal I will just do two GPO's. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 3:10 PM To: NT System Admin Issues Subject: WMI filter help I think what I have put together, that won't work, will explain pretty well what I want. I want all the Win7 machines and any machine whose name starts with R2. I have tried many iterations of the syntax and a fair amount of googling. I would also gladly accept any pointers on resources for syntax, preferably with examples. SELECT * (FROM Win32_OperatingSystem WHERE Version LIKE '6.1.%') OR SELECT * (FROM Win32_ComputerSystem WHERE Name LIKE 'R2%') ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help (SOLVED SORTA)
That was only for the Active Directory list. :) From: Crawford, Scott [mailto:crawfo...@evangel.edu] Sent: Wednesday, September 28, 2011 3:35 PM To: NT System Admin Issues Subject: RE: WMI filter help (SOLVED SORTA) What happened to queuing your messages in the outbox for a few minutes? :) Glad you found that. I was just looking for where that was documented. Now I don't have to. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 2:31 PM To: NT System Admin Issues Subject: RE: WMI filter help (SOLVED SORTA) Hmmm, according to google a WMI queries cannot contain multiple classes. Bummer, but not a big deal I will just do two GPO's. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 3:10 PM To: NT System Admin Issues Subject: WMI filter help I think what I have put together, that won't work, will explain pretty well what I want. I want all the Win7 machines and any machine whose name starts with R2. I have tried many iterations of the syntax and a fair amount of googling. I would also gladly accept any pointers on resources for syntax, preferably with examples. SELECT * (FROM Win32_OperatingSystem WHERE Version LIKE '6.1.%') OR SELECT * (FROM Win32_ComputerSystem WHERE Name LIKE 'R2%') ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
RE: WMI filter help (SOLVED SORTA)
Heh. I couldn't remember where I saw it. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 2:38 PM To: NT System Admin Issues Subject: RE: WMI filter help (SOLVED SORTA) That was only for the Active Directory list. :) From: Crawford, Scott [mailto:crawfo...@evangel.edu]mailto:[mailto:crawfo...@evangel.edu] Sent: Wednesday, September 28, 2011 3:35 PM To: NT System Admin Issues Subject: RE: WMI filter help (SOLVED SORTA) What happened to queuing your messages in the outbox for a few minutes? :) Glad you found that. I was just looking for where that was documented. Now I don't have to. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 2:31 PM To: NT System Admin Issues Subject: RE: WMI filter help (SOLVED SORTA) Hmmm, according to google a WMI queries cannot contain multiple classes. Bummer, but not a big deal I will just do two GPO's. From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]mailto:[mailto:kennedy...@elyriaschools.org] Sent: Wednesday, September 28, 2011 3:10 PM To: NT System Admin Issues Subject: WMI filter help I think what I have put together, that won't work, will explain pretty well what I want. I want all the Win7 machines and any machine whose name starts with R2. I have tried many iterations of the syntax and a fair amount of googling. I would also gladly accept any pointers on resources for syntax, preferably with examples. SELECT * (FROM Win32_OperatingSystem WHERE Version LIKE '6.1.%') OR SELECT * (FROM Win32_ComputerSystem WHERE Name LIKE 'R2%') ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: WMI filter help
This is a valid WMI filter that I use: select * from Win32_OperatingSystem where Version like 6.1% and ProductType=3 I would think you could do something like this. select * from Win32_OperatingSystem where Version like 6.1% OR Name Like R2% Chris Bodnar, MCSE, MCITP Technical Support III Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax: 610-807-6003 From: Kennedy, Jim kennedy...@elyriaschools.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 09/28/2011 03:12 PM Subject:WMI filter help I think what I have put together, that won’t work, will explain pretty well what I want. I want all the Win7 machines and any machine whose name starts with R2. I have tried many iterations of the syntax and a fair amount of googling. I would also gladly accept any pointers on resources for syntax, preferably with examples. SELECT * (FROM Win32_OperatingSystem WHERE Version LIKE '6.1.%') OR SELECT * (FROM Win32_ComputerSystem WHERE Name LIKE 'R2%') ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
Re: WMI Filter Help
Joseph- The second filter most likely won't do what you're expecting. While the first filter will produce 1 or 0 matching rows, the second filter will produce N or N-1 matching rows, depending on if Folder is found or not. N will be the total number of directories. This means that the second filter will always evalutate to true unless the wmi query times out. Generally WMI filters aren't capable of handing the NOT-case. You wont get a truth value for something that doesn't match. Your case would also require a subquery, something that WQL does not handle. You'll have to put this one in a script (or GPP if it can handle what you want). -Anders On Tue, Feb 10, 2009 at 6:48 PM, Joseph L. Casale jcas...@activenetwerx.com wrote: I created two filters: Select * from Win32_Directory Where Filename = 'C:\\Program Files\\Folder' Select * from Win32_Directory Where Filename 'C:\\Program Files\\Folder' and set two gpo's to apply based on this. For some reason, all the machines evaluate positive and falsely for both and switch constantly for one combination to another? What's up with that? Anyone got any ideas? I was going to search Win32_Product for the msi, but it apparently didn't install via msi so looking for this folder seems to be the best option… Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: WMI Filter Help
That explains it all... I managed to figure out a solution which worked well last night, I have only one application that needs special treatment, so I created a duplicate WSUS GPO for the special case, altered its wsus targeted group, set it to enforced to make sure it wins when getting applied and used the first filter. Now comps w/o get the original GPO, and these special case computers get theirs applied over top. Not very scalable but if it gets more complicated I will just deal with it an OU level by splitting stuff up. Thanks for the insight! jlc From: Anders Blomgren [mailto:chanks...@gmail.com] Sent: Wednesday, February 11, 2009 2:58 AM To: NT System Admin Issues Subject: Re: WMI Filter Help Joseph- The second filter most likely won't do what you're expecting. While the first filter will produce 1 or 0 matching rows, the second filter will produce N or N-1 matching rows, depending on if Folder is found or not. N will be the total number of directories. This means that the second filter will always evalutate to true unless the wmi query times out. Generally WMI filters aren't capable of handing the NOT-case. You wont get a truth value for something that doesn't match. Your case would also require a subquery, something that WQL does not handle. You'll have to put this one in a script (or GPP if it can handle what you want). -Anders On Tue, Feb 10, 2009 at 6:48 PM, Joseph L. Casale jcas...@activenetwerx.commailto:jcas...@activenetwerx.com wrote: I created two filters: Select * from Win32_Directory Where Filename = 'C:\\Program Files\\Folder' Select * from Win32_Directory Where Filename 'C:\\Program Files\\Folder' and set two gpo's to apply based on this. For some reason, all the machines evaluate positive and falsely for both and switch constantly for one combination to another? What's up with that? Anyone got any ideas? I was going to search Win32_Product for the msi, but it apparently didn't install via msi so looking for this folder seems to be the best option... Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: WMI Filter Help
Whoops, forgot I stopped looking for folder and started looking for Name so I could speed it up with a full path. Select * from Win32_Directory Where Name = 'C:\\Program Files\\Folder' works immediately, but Select * from Win32_Directory Where Name 'C:\\Program Files\\Folder' takes forever? Any reason why that's hard to search for, I am guessing because of the way I wrote it, its comparing everything to the statement? jlc From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, February 10, 2009 10:49 AM To: NT System Admin Issues Subject: WMI Filter Help I created two filters: Select * from Win32_Directory Where Filename = 'C:\\Program Files\\Folder' Select * from Win32_Directory Where Filename 'C:\\Program Files\\Folder' and set two gpo's to apply based on this. For some reason, all the machines evaluate positive and falsely for both and switch constantly for one combination to another? What's up with that? Anyone got any ideas? I was going to search Win32_Product for the msi, but it apparently didn't install via msi so looking for this folder seems to be the best option... Thanks! jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: WMI Filter Help
Correct, the first one only has to match once, then exists. The 2nd one has to evaluate every directory, so will take longer. Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax: 610-807-6003 _ From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, February 10, 2009 1:12 PM To: NT System Admin Issues Subject: RE: WMI Filter Help Whoops, forgot I stopped looking for folder and started looking for Name so I could speed it up with a full path. Select * from Win32_Directory Where Name = 'C:\\Program Files\\Folder' works immediately, but Select * from Win32_Directory Where Name 'C:\\Program Files\\Folder' takes forever? Any reason why that's hard to search for, I am guessing because of the way I wrote it, its comparing everything to the statement? jlc From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, February 10, 2009 10:49 AM To: NT System Admin Issues Subject: WMI Filter Help I created two filters: Select * from Win32_Directory Where Filename = 'C:\\Program Files\\Folder' Select * from Win32_Directory Where Filename 'C:\\Program Files\\Folder' and set two gpo's to apply based on this. For some reason, all the machines evaluate positive and falsely for both and switch constantly for one combination to another? What's up with that? Anyone got any ideas? I was going to search Win32_Product for the msi, but it apparently didn't install via msi so looking for this folder seems to be the best option. Thanks! jlc - This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: WMI Filter Help
Chris, Is there a better way to check the second situation? If the software is not installed, I need a specific GOP to apply. There's nothing unique to check for on the clients without it, I can only check if it doesn't exists. I wonder why the behavior of Name when given a full path still has to check every dir versus the first scenario where it just goes out and looks for it? Thanks! jlc From: Christopher Bodnar [mailto:christopher_bod...@glic.com] Sent: Tuesday, February 10, 2009 12:08 PM To: NT System Admin Issues Subject: RE: WMI Filter Help Correct, the first one only has to match once, then exists. The 2nd one has to evaluate every directory, so will take longer. Chris Bodnar, MCSE Sr. Systems Engineer Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.commailto:christopher_bod...@glic.com Phone: 610-807-6459 Fax: 610-807-6003 From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, February 10, 2009 1:12 PM To: NT System Admin Issues Subject: RE: WMI Filter Help Whoops, forgot I stopped looking for folder and started looking for Name so I could speed it up with a full path. Select * from Win32_Directory Where Name = 'C:\\Program Files\\Folder' works immediately, but Select * from Win32_Directory Where Name 'C:\\Program Files\\Folder' takes forever? Any reason why that's hard to search for, I am guessing because of the way I wrote it, its comparing everything to the statement? jlc From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Tuesday, February 10, 2009 10:49 AM To: NT System Admin Issues Subject: WMI Filter Help I created two filters: Select * from Win32_Directory Where Filename = 'C:\\Program Files\\Folder' Select * from Win32_Directory Where Filename 'C:\\Program Files\\Folder' and set two gpo's to apply based on this. For some reason, all the machines evaluate positive and falsely for both and switch constantly for one combination to another? What's up with that? Anyone got any ideas? I was going to search Win32_Product for the msi, but it apparently didn't install via msi so looking for this folder seems to be the best option... Thanks! jlc This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
