Kind of like the Builtin Domain Controllers group. ;) DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE
From: Andrew S. Baker [mailto:[email protected]] Sent: Tuesday, October 25, 2011 10:49 AM To: NT System Admin Issues Subject: Re: WMI filter for GPO's for WIndows 2003 Servers, I prefer this method for inclusions and exclusions, although it is less automatic. ASB http://XeeMe.com/AndrewBaker Harnessing the Advantages of Technology for the SMB market... On Tue, Oct 25, 2011 at 9:08 AM, Kennedy, Jim <[email protected]<mailto:[email protected]>> wrote: Another option to exclude the DC's is to add them to a security group and deny read on the GPO. From: Ziots, Edward [mailto:[email protected]<mailto:[email protected]>] Sent: Tuesday, October 25, 2011 9:06 AM To: NT System Admin Issues Subject: RE: WMI filter for GPO's for WIndows 2003 Servers, I was meaning to exclude DC's since all my DC's are Windows 2008 R2 SP1. This was more targeted for Windows 2003 Member servers, since they and I just learned Windows 2008 servers will not obey the advance audit settings that are reserved for Windows 2008 R2 and Windows 7. So I had to create different Audit Policy GPO's and filter them accordingly. Do appreciate the advice on the WMI filter as always. Z Edward E. Ziots CISSP, Network +, Security + Security Engineer Lifespan Organization Email:[email protected]<mailto:email%[email protected]> Cell:401-639-3505<tel:401-639-3505> [CISSP_logo] From: Michael B. Smith [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Monday, October 24, 2011 4:09 PM To: NT System Admin Issues Subject: RE: WMI filter for GPO's for WIndows 2003 Servers, I would do it this way: select * from Win32_OperatingSystem where version like '5.%' and name like '%server%' Your query excludes domain controllers. Dunno whether that's what you intended or not. The WMI class is documented here: http://msdn.microsoft.com/en-us/library/windows/desktop/aa394239(v=vs.85).aspx Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Ziots, Edward [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Monday, October 24, 2011 3:52 PM To: NT System Admin Issues Subject: WMI filter for GPO's for WIndows 2003 Servers, Just a quick question, for those filtering with WMI filters. I am using the following for a Windows 2003 Filter, does anyone else have anything else that works a bit better or know that its valid. select * from Win32_OperatingSystem where Version like "5.%" and ProductType = "3" TIA EZ Edward E. Ziots CISSP, Network +, Security + Security Engineer Lifespan Organization Email:[email protected]<mailto:email%[email protected]> Cell:401-639-3505<tel:401-639-3505> [CISSP_logo] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
<<inline: image001.jpg>>
