In the Group Policy report above, the GPO “Wireless Configuration Settings” is linked to the High Schools OU and applies to Authenticated Users. But what if there was a better way? What if you could configure clients, like a laptop, to automatically apply GPOs based on certain built-in criteria? What if the GPO could, in effect, sniff at the device to decide whether it was the right sort to have the GPO applied? When you combine the granular power of Windows Management Instrumentation (WMI) with a GPO, you can achieve this type of dynamic processing! Let’s look at an example: If you want to apply specific settings to only your laptops, you would have to put every laptop in a group or into a dedicated OU. It requires you, the administrator, to manage security group everything. The object must also be in an organizational unit that the GPO is linked to.Īlthough it is possible to use these two levels of filtering creatively to increase the selectivity of Group Policy, applying GPOs this way has a notable limitation. The object must be in the security group that the GPO is scoped to. The object (either a computer or user) must meet certain criteria to process the GPO though. When combined, GPOs can be linked to multiple OUs and filtered to several security groups. There is a certain amount of versatility in using Organizational Units or security groups, and much of the work of Group Policy can be done with just these two filters. What if you need to deploy different versions of software to laptops than desktop devices, or apply different installation routines based on the OS level or for particular CPU? How would you use Group Policy to upgrade only existing installations of certain software, or do it only on certain days of the week? Fortunately, Group Policy can achieve this, though it may not appear obvious to the casual user. However, this isn’t enough to tackle the full range of selection you’re likely to be faced with. They can also be scoped down by security groups. GPOs, which contain our settings for either computers or users, can be linked to Organizational Units (OUs). In our previous articles covering Group Policy, we saw two main ways to deploy software by applying a Group Policy Object (GPO). If you ever have to change a setting on just laptops or change the behavior on a specific OS, using a WMI Filter will save you hours of work. Group Policy, when combined with WMI filters, allow an Administrator to dynamically apply policies. Group Policy and WMI, A Wonderful Combination - Simple Talk Skip to content
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |