MCITP 70-640: Group Policy Filtering

Check out http://YouTube.com/ITFreeTraining or http://itfreetraining.com for more of our always free training videos.
There are a number of different options in Group Policy that allows you to target Group Policy to particular users and computers. This video looks at WMI filters and security that can be applied to target Group Policy settings that you configure. The video also looks at how you can disable parts of Group Policy to speed up the processing on your clients.

Sorting by OU's
One way of applying Group Policy is to sort the users and computers into different OU's. A typical way of doing this is to separate the users and computers into physical locations, departments and operating systems. The problem with this approach is that an administrator needs to sort these objects initially and when change occur. For example, if users change job titles and operating systems are upgraded. By using filters in Group Policy you can automate this process.

Demonstration
All the Group Policy filtering options are available from Group Policy Management Console. Once you select a Group Policy Object you can configure additional filtering options for it.

User/Computer Configuring Enabling/Disabling
If you select the details tab, the option GPO status allows you to enable or disable the GPO as well as only have the user or computer configuration enabled. If you are only using one part of the configuration for the GPO, it is worth while disabling the other configuration. Disabling configuration like this will speed up the processing of the GPO on the client.

Security Filtering
On the scope tab you can configure particular groups to be allowed the ability to apply the Group Policy object. Adding groups here effectively changes the permissions of the Group Policy Object giving that group access to apply the Group Policy. The same effect can be achieved by editing the security of the Group Policy Object directly, however Security Filtering does provide an easier interface if all you want to do is see who has the ability to apply the Group Policy or add or remove access.

WMI Filter
Windows Management Instrumentation (WMI) allows software to retrieve information about the client. For example, information about the operating system, hardware and software installed can be retrieved using WMI. Using WMI filters, you can target a Group Policy Object to particular characteristics of a computer. You can only assign one WMI filter per Group Policy Object, however you can make it as complex as you wish. Using WMI filters in your domain especially complex WMI filters this can slow down the time Group Policy takes to apply.

To create a WMI query, Select WMI Filters in the left panel of Group Policy Management under your domain and paste in your WMI query. An example of a WMI query is listed below.

Select * FROM Win32_OperatingSystem WHERE Caption="Microsoft Windows XP Professional" AND CSDVersion="Service Pack 3"

Once you have a WMI query configured, you can assign one WMI filter to the Group Policy Object on the scope tab.

A free WMI explorer. http://www.ks-soft.net/hostmon.eng/wm...

Delegation
The delegation tab effectively shows some of permissions of the Group Policy Object. In order for the Group Policy to be applied to a client it requires read and apply group policy permissions. To gain access the security properties press the advanced button. If you want to prevent the group policy for being applied, select the deny option for apply group policy. Deny permissions should only be applied when necessary. In most cases there is another solution which does not require deny permissions.

References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory Second Edition" pg 285 -- 291

1. group policy editor, group policy management, group policy management console, group policy editor windows 10, group policy update, group policy object, group policy windows 10, group policy update command, group policy client service, group policy management editor, group policy password policy, group policy enforced, group policy preferences, group policy not applying, group policy results, group policy command, group policy client service failed, group policy loopback, group policy central store, group policy trusted sites, filtering water, filtering definition, filtering water bottle, filtering flask, filtering occurs when, filtering in excel, filtering shower head, filtering synonym, filtering of blood procedure, filtering wine, filtering software, filtering data in excel, filtering data in r, filtering enabled roblox, filtering vodka, filtering pandas dataframe, filtering beer, filtering data, filtering platform packet drop, filtering emails in gmail, wmi filter windows 10, wmi filter gpo, wmi filter computer name, wmi filter server 2016, wmi filter windows 7, wmi filter product type, wmi filter examples, wmi filter not like, wmi filter workstations only, wmi filter syntax, wmi filter laptop, wmi filter windows 10 1803, wmi filter test, wmi filter multiple queries, wmi filter powershell, wmi filter not equal, wmi filter group policy, wmi filter like, wmi filter server 2019, wmi filter pdc emulator, active directory users and computers, active directory windows 10, active directory domain services, active directory administrative center, active directory federation services, active directory tutorial, active directory tools, active directory ou, active directory ports, active directory recycle bin, active directory download, active directory certificate services, active directory password policy, active directory certification, active directory forest, active directory lightweight directory services, active directory powershell module, active directory ldap, active directory for dummies, active directory management tools, \u003d -570, 70-640 exam, 70-640 certification, 70-640 pdf, 70-640 study guide pdf, 70-640 exam questions pdf, 70-640 pdf ebook, mcitp systems administrator, mcitp vs mcse, mcitp-ea, mcitp enterprise administrator, mcitp server administrator, mcitp 70-640, mcitp salary, mcitp certification course, mcitp microsoft, mcitp practice test, mcitp jobs, mcitp windows 10, mcitp meaning, mcitp family support network, mcitp logo, mcitp replacement, mcitp certification cost, mcitp mcps, mcitp 2008, mcitp mcse mcts, mcts real time, mcts tracker, mctsib, mcts m card, mctssa, mcts route 15, mcts trip planner, mcts bus, mcts route 76, mcts route 27, mcts green line, mcts route 14, mcts route 30, mcts route 19, mcts gold line, mcts route 67, mcts route 23, mcts app, mcts next, mcts 80, itfreetraining youtube, itfreetraining active directory, itfreetraining adfs, itfreetraining dns, itfreetraining 70-410, itfreetraining windows server 2016, itfreetraining windows server 2012, itfreetraining vmware, itfreetraining 70-640, itfreetraining powershell, itfreetraining windows 7, itfreetraining windows 10, itfreetraining hyper v, itfreetraining group policy, itfreetraining groups, itfreetraining dfs, itfreetraining sccm, itfreetraining certificate, itfreetraining linux, itfreetraining 70-411

MCITP 70-640: Group Policy Filtering
51,428 views views	followers
198 Likes	198 Dislikes
Education	Upload TimePublished on 24 Jan 2013