| Author | Messages | |
pamarths
Posts:48
 | | 02/02/2010 1:00 PM |
| Today I got my hands only WMI filtering for the first time. I created a wmi
filter with below content and applied to a OU where users are residing. It's
basically a user policy and my intention is to apply this policy when the
user logins to windows 7 machines only.
root\CIMv2;select * from Win32_OperatingSystem where Caption = "Microsoft
Windows 7 Enterprise".
Though everything looks fine, this GPO is not getting applied when the user
logins to windows 7 machine. I verified the windows 7 machine version using
below command and its matching. Can any one help me in solving this? I
enabled debug logging in win7 machine and looked at the logs and it has
entries saying that "GPO does not pass the filter check; so will not be
applied".
C:\>wmic os get caption
Caption
Microsoft Windows 7 Enterprise
C:\>
Thanks,
Sitaram
www.techibee.com
| | | |
| pamarths
Posts:48
| | 02/02/2010 1:08 PM |
| log entries from gpsvc.log
-------------------------------------
GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of: <[
mydomain.com;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
with target Machine and event 0xabc
GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User =
machine, changenumber = 0
GPSVC(374.7d8) 18:13:26:467 Target = Machine
GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User = machine,
changenumber = 0
GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting with
status = 0
GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the filter
check and so will not be applied.
On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi <xxxxxxxxxxxxxxxx
> wrote:
> Today I got my hands only WMI filtering for the first time. I created a wmi
> filter with below content and applied to a OU where users are residing. It's
> basically a user policy and my intention is to apply this policy when the
> user logins to windows 7 machines only.
>
> root\CIMv2;select * from Win32_OperatingSystem where Caption = "Microsoft
> Windows 7 Enterprise".
>
> Though everything looks fine, this GPO is not getting applied when the user
> logins to windows 7 machine. I verified the windows 7 machine version using
> below command and its matching. Can any one help me in solving this? I
> enabled debug logging in win7 machine and looked at the logs and it has
> entries saying that "GPO does not pass the filter check; so will not be
> applied".
>
> C:\>wmic os get caption
> Caption
> Microsoft Windows 7 Enterprise
>
> C:\>
> Thanks,
> Sitaram
> www.techibee.com
>
| | | |
| DarraghOShaughnessy
Posts:177
| | 02/02/2010 1:08 PM |
| Would it not be better to use the OS version instead of caption?
Regards,
Darragh O'Shaughnessy
IT Services Department
E-Mail: xxxxxxxxxxxxxxxx
<mailto:xxxxxxxxxxxxxxxx>
Ext: 2562
Direct Dial In: 01-7994028
Web Site: www.vhi.ie
Help the environment. If you need to print this email consider using Eco
Font to save ink: http://www.ecofont.eu/ecofont_en.html
<http://www.ecofont.eu/ecofont_en.html>
This e-mail and any files transmitted with it contain information which
may be confidential and which may also be privileged and is intended
solely for the use of the individual or entity to whom it is addressed.
Unless you are the intended recipient you may not copy or use it, or
disclose it to anyone else. Any opinions expressed are that of the
individual and not necessarily that of Vhi Healthcare. If you have
received this e-mail in error please notify the sender by return. This
footnote also confirms that this e-mail message has been Swept for the
presence of computer viruses.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Sitaram Pamarthi
Sent: 02 February 2010 13:06
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] WMi filter failure
log entries from gpsvc.log
-------------------------------------
GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of:
<[mydomain.com;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
with target Machine and event 0xabc
GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User
= machine, changenumber = 0
GPSVC(374.7d8) 18:13:26:467 Target = Machine
GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User =
machine, changenumber = 0
GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting
with status = 0
GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the
filter check and so will not be applied.
On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi
<xxxxxxxxxxxxxxxx> wrote:
Today I got my hands only WMI filtering for the first time. I created a
wmi filter with below content and applied to a OU where users are
residing. It's basically a user policy and my intention is to apply this
policy when the user logins to windows 7 machines only.
root\CIMv2;select * from Win32_OperatingSystem where Caption =
"Microsoft Windows 7 Enterprise".
Though everything looks fine, this GPO is not getting applied when the
user logins to windows 7 machine. I verified the windows 7 machine
version using below command and its matching. Can any one help me in
solving this? I enabled debug logging in win7 machine and looked at the
logs and it has entries saying that "GPO does not pass the filter check;
so will not be applied".
C:\>wmic os get caption
Caption
Microsoft Windows 7 Enterprise
C:\>
Thanks,
Sitaram
www.techibee.com <http://www.techibee.com/>
| | | |
| username
Posts:0
| | 02/02/2010 1:13 PM |
| Here's the query for OS version, straight from a Microsoft example. I'm
using it currently.
select * from Win32_OperatingSystem where Version like "6.1%" and
ProductType = "1"
On Tue, Feb 2, 2010 at 7:08 AM, Darragh O'Shaughnessy <
xxxxxxxxxxxxxxxx> wrote:
> Would it not be better to use the OS version instead of caption?
>
>
>
> Regards,
>
>
>
> Darragh O'Shaughnessy
>
> IT Services Department
>
>
>
> E-Mail: xxxxxxxxxxxxxxxx
>
>
>
> Ext: 2562
>
> Direct Dial In: 01-7994028
>
>
>
> Web Site: www.vhi.ie
>
>
>
> Help the environment. If you need to print this email consider using Eco
> Font to save ink: http://www.ecofont.eu/ecofont_en.html
>
>
>
>
>
> This e-mail and any files transmitted with it contain information which may
> be confidential and which may also be privileged and is intended solely for
> the use of the individual or entity to whom it is addressed. Unless you are
> the intended recipient you may not copy or use it, or disclose it to anyone
> else. Any opinions expressed are that of the individual and not necessarily
> that of Vhi Healthcare. If you have received this e-mail in error please
> notify the sender by return. This footnote also confirms that this e-mail
> message has been Swept for the presence of computer viruses.
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Sitaram Pamarthi
> *Sent:* 02 February 2010 13:06
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* Re: [gptalk] WMi filter failure
>
>
>
> log entries from gpsvc.log
>
> -------------------------------------
>
>
>
> GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of: <[
> mydomain.com;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
> GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
> with target Machine and event 0xabc
> GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User =
> machine, changenumber = 0
> GPSVC(374.7d8) 18:13:26:467 Target = Machine
> GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User = machine,
> changenumber = 0
> GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting
> with status = 0
> GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the filter
> check and so will not be applied.
>
>
>
>
>
>
>
>
>
> On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi <
> xxxxxxxxxxxxxxxx> wrote:
>
> Today I got my hands only WMI filtering for the first time. I created a wmi
> filter with below content and applied to a OU where users are residing. It's
> basically a user policy and my intention is to apply this policy when the
> user logins to windows 7 machines only.
>
>
>
> root\CIMv2;select * from Win32_OperatingSystem where Caption = "Microsoft
> Windows 7 Enterprise".
>
>
>
> Though everything looks fine, this GPO is not getting applied when the user
> logins to windows 7 machine. I verified the windows 7 machine version using
> below command and its matching. Can any one help me in solving this? I
> enabled debug logging in win7 machine and looked at the logs and it has
> entries saying that "GPO does not pass the filter check; so will not be
> applied".
>
>
>
> C:\>wmic os get caption
> Caption
> Microsoft Windows 7 Enterprise
>
>
> C:\>
>
> Thanks,
>
> Sitaram
>
> www.techibee.com
>
>
>
--
Harrison L. Shutan
IT Specialist
Gewalt Hamilton Associates, Inc.
850 Forest Edge Drive
Vernon Hills, Illinois 60061
847.478.9700
This message contains proprietary, privileged, and/or confidential information
solely for the use of the individual(s) to which it is addressed. If you
received this message in error or are not the intended recipient, please notify
the sender by reply e-mail and delete and destroy the message.
| | | |
| pamarths
Posts:48
| | 02/02/2010 1:20 PM |
| Harrison , let me try the option you have given.....
On Tue, Feb 2, 2010 at 6:41 PM, Harrison Shutan
<xxxxxxxxxxxxxxxx>wrote:
> Here's the query for OS version, straight from a Microsoft example. I'm
> using it currently.
>
>
> select * from Win32_OperatingSystem where Version like "6.1%" and
> ProductType = "1"
>
>
>
> On Tue, Feb 2, 2010 at 7:08 AM, Darragh O'Shaughnessy <
> xxxxxxxxxxxxxxxx> wrote:
>
>> Would it not be better to use the OS version instead of caption?
>>
>>
>>
>> Regards,
>>
>>
>>
>> Darragh O'Shaughnessy
>>
>> IT Services Department
>>
>>
>>
>> E-Mail: xxxxxxxxxxxxxxxx
>>
>>
>>
>> Ext: 2562
>>
>> Direct Dial In: 01-7994028
>>
>>
>>
>> Web Site: www.vhi.ie
>>
>>
>>
>> Help the environment. If you need to print this email consider using Eco
>> Font to save ink: http://www.ecofont.eu/ecofont_en.html
>>
>>
>>
>>
>>
>> This e-mail and any files transmitted with it contain information which
>> may be confidential and which may also be privileged and is intended solely
>> for the use of the individual or entity to whom it is addressed. Unless you
>> are the intended recipient you may not copy or use it, or disclose it to
>> anyone else. Any opinions expressed are that of the individual and not
>> necessarily that of Vhi Healthcare. If you have received this e-mail in
>> error please notify the sender by return. This footnote also confirms that
>> this e-mail message has been Swept for the presence of computer viruses.
>>
>>
>>
>> *From:* xxxxxxxxxxxxxxxx [mailto:
>> xxxxxxxxxxxxxxxx] *On Behalf Of *Sitaram Pamarthi
>> *Sent:* 02 February 2010 13:06
>> *To:* xxxxxxxxxxxxxxxx
>> *Subject:* Re: [gptalk] WMi filter failure
>>
>>
>>
>> log entries from gpsvc.log
>>
>> -------------------------------------
>>
>>
>>
>> GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of: <[
>> mydomain.com;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
>> GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
>> with target Machine and event 0xabc
>> GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User =
>> machine, changenumber = 0
>> GPSVC(374.7d8) 18:13:26:467 Target = Machine
>> GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User =
>> machine, changenumber = 0
>> GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting
>> with status = 0
>> GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the filter
>> check and so will not be applied.
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi <
>> xxxxxxxxxxxxxxxx> wrote:
>>
>> Today I got my hands only WMI filtering for the first time. I created a
>> wmi filter with below content and applied to a OU where users are residing.
>> It's basically a user policy and my intention is to apply this policy when
>> the user logins to windows 7 machines only.
>>
>>
>>
>> root\CIMv2;select * from Win32_OperatingSystem where Caption = "Microsoft
>> Windows 7 Enterprise".
>>
>>
>>
>> Though everything looks fine, this GPO is not getting applied when the
>> user logins to windows 7 machine. I verified the windows 7 machine version
>> using below command and its matching. Can any one help me in solving this? I
>> enabled debug logging in win7 machine and looked at the logs and it has
>> entries saying that "GPO does not pass the filter check; so will not be
>> applied".
>>
>>
>>
>> C:\>wmic os get caption
>> Caption
>> Microsoft Windows 7 Enterprise
>>
>>
>> C:\>
>>
>> Thanks,
>>
>> Sitaram
>>
>> www.techibee.com
>>
>>
>>
>
>
>
> --
> Harrison L. Shutan
> IT Specialist
> Gewalt Hamilton Associates, Inc.
> 850 Forest Edge Drive
> Vernon Hills, Illinois 60061
> 847.478.9700
>
> This message contains proprietary, privileged, and/or confidential information
> solely for the use of the individual(s) to which it is addressed. If you
> received this message in error or are not the intended recipient, please notify
> the sender by reply e-mail and delete and destroy the message.
>
>
>
| | | |
| pamarths
Posts:48
| | 02/02/2010 1:34 PM |
| Yay!!.. it worked :-)
Can you provide me a working filter for windows XP as well?
On Tue, Feb 2, 2010 at 6:48 PM, Sitaram Pamarthi <xxxxxxxxxxxxxxxx
> wrote:
> Harrison , let me try the option you have given.....
>
>
> On Tue, Feb 2, 2010 at 6:41 PM, Harrison Shutan <xxxxxxxxxxxxxxxx
> > wrote:
>
>> Here's the query for OS version, straight from a Microsoft example. I'm
>> using it currently.
>>
>>
>> select * from Win32_OperatingSystem where Version like "6.1%" and
>> ProductType = "1"
>>
>>
>>
>> On Tue, Feb 2, 2010 at 7:08 AM, Darragh O'Shaughnessy <
>> xxxxxxxxxxxxxxxx> wrote:
>>
>>> Would it not be better to use the OS version instead of caption?
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Darragh O'Shaughnessy
>>>
>>> IT Services Department
>>>
>>>
>>>
>>> E-Mail: xxxxxxxxxxxxxxxx
>>>
>>>
>>>
>>> Ext: 2562
>>>
>>> Direct Dial In: 01-7994028
>>>
>>>
>>>
>>> Web Site: www.vhi.ie
>>>
>>>
>>>
>>> Help the environment. If you need to print this email consider using Eco
>>> Font to save ink: http://www.ecofont.eu/ecofont_en.html
>>>
>>>
>>>
>>>
>>>
>>> This e-mail and any files transmitted with it contain information which
>>> may be confidential and which may also be privileged and is intended solely
>>> for the use of the individual or entity to whom it is addressed. Unless you
>>> are the intended recipient you may not copy or use it, or disclose it to
>>> anyone else. Any opinions expressed are that of the individual and not
>>> necessarily that of Vhi Healthcare. If you have received this e-mail in
>>> error please notify the sender by return. This footnote also confirms that
>>> this e-mail message has been Swept for the presence of computer viruses.
>>>
>>>
>>>
>>> *From:* xxxxxxxxxxxxxxxx [mailto:
>>> xxxxxxxxxxxxxxxx] *On Behalf Of *Sitaram Pamarthi
>>> *Sent:* 02 February 2010 13:06
>>> *To:* xxxxxxxxxxxxxxxx
>>> *Subject:* Re: [gptalk] WMi filter failure
>>>
>>>
>>>
>>> log entries from gpsvc.log
>>>
>>> -------------------------------------
>>>
>>>
>>>
>>> GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of: <[
>>> mydomain.com;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
>>> GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
>>> with target Machine and event 0xabc
>>> GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User =
>>> machine, changenumber = 0
>>> GPSVC(374.7d8) 18:13:26:467 Target = Machine
>>> GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User =
>>> machine, changenumber = 0
>>> GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting
>>> with status = 0
>>> GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the filter
>>> check and so will not be applied.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi <
>>> xxxxxxxxxxxxxxxx> wrote:
>>>
>>> Today I got my hands only WMI filtering for the first time. I created a
>>> wmi filter with below content and applied to a OU where users are residing.
>>> It's basically a user policy and my intention is to apply this policy when
>>> the user logins to windows 7 machines only.
>>>
>>>
>>>
>>> root\CIMv2;select * from Win32_OperatingSystem where Caption = "Microsoft
>>> Windows 7 Enterprise".
>>>
>>>
>>>
>>> Though everything looks fine, this GPO is not getting applied when the
>>> user logins to windows 7 machine. I verified the windows 7 machine version
>>> using below command and its matching. Can any one help me in solving this? I
>>> enabled debug logging in win7 machine and looked at the logs and it has
>>> entries saying that "GPO does not pass the filter check; so will not be
>>> applied".
>>>
>>>
>>>
>>> C:\>wmic os get caption
>>> Caption
>>> Microsoft Windows 7 Enterprise
>>>
>>>
>>> C:\>
>>>
>>> Thanks,
>>>
>>> Sitaram
>>>
>>> www.techibee.com
>>>
>>>
>>>
>>
>>
>>
>> --
>> Harrison L. Shutan
>> IT Specialist
>> Gewalt Hamilton Associates, Inc.
>> 850 Forest Edge Drive
>> Vernon Hills, Illinois 60061
>> 847.478.9700
>>
>> This message contains proprietary, privileged, and/or confidential information
>> solely for the use of the individual(s) to which it is addressed. If you
>> received this message in error or are not the intended recipient, please notify
>> the sender by reply e-mail and delete and destroy the message.
>>
>>
>>
>
| | | |
| username
Posts:0
| | 02/02/2010 1:36 PM |
| Sure, Just change the version 6.1 to 5.1
On Tue, Feb 2, 2010 at 7:32 AM, Sitaram Pamarthi <xxxxxxxxxxxxxxxx
> wrote:
> Yay!!.. it worked :-)
>
> Can you provide me a working filter for windows XP as well?
>
> On Tue, Feb 2, 2010 at 6:48 PM, Sitaram Pamarthi <
> xxxxxxxxxxxxxxxx> wrote:
>
>> Harrison , let me try the option you have given.....
>>
>>
>> On Tue, Feb 2, 2010 at 6:41 PM, Harrison Shutan <
>> xxxxxxxxxxxxxxxx> wrote:
>>
>>> Here's the query for OS version, straight from a Microsoft example. I'm
>>> using it currently.
>>>
>>>
>>> select * from Win32_OperatingSystem where Version like "6.1%" and
>>> ProductType = "1"
>>>
>>>
>>>
>>> On Tue, Feb 2, 2010 at 7:08 AM, Darragh O'Shaughnessy <
>>> xxxxxxxxxxxxxxxx> wrote:
>>>
>>>> Would it not be better to use the OS version instead of caption?
>>>>
>>>>
>>>>
>>>> Regards,
>>>>
>>>>
>>>>
>>>> Darragh O'Shaughnessy
>>>>
>>>> IT Services Department
>>>>
>>>>
>>>>
>>>> E-Mail: xxxxxxxxxxxxxxxx
>>>>
>>>>
>>>>
>>>> Ext: 2562
>>>>
>>>> Direct Dial In: 01-7994028
>>>>
>>>>
>>>>
>>>> Web Site: www.vhi.ie
>>>>
>>>>
>>>>
>>>> Help the environment. If you need to print this email consider using Eco
>>>> Font to save ink: http://www.ecofont.eu/ecofont_en.html
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> This e-mail and any files transmitted with it contain information which
>>>> may be confidential and which may also be privileged and is intended solely
>>>> for the use of the individual or entity to whom it is addressed. Unless you
>>>> are the intended recipient you may not copy or use it, or disclose it to
>>>> anyone else. Any opinions expressed are that of the individual and not
>>>> necessarily that of Vhi Healthcare. If you have received this e-mail in
>>>> error please notify the sender by return. This footnote also confirms that
>>>> this e-mail message has been Swept for the presence of computer viruses.
>>>>
>>>>
>>>>
>>>> *From:* xxxxxxxxxxxxxxxx [mailto:
>>>> xxxxxxxxxxxxxxxx] *On Behalf Of *Sitaram Pamarthi
>>>> *Sent:* 02 February 2010 13:06
>>>> *To:* xxxxxxxxxxxxxxxx
>>>> *Subject:* Re: [gptalk] WMi filter failure
>>>>
>>>>
>>>>
>>>> log entries from gpsvc.log
>>>>
>>>> -------------------------------------
>>>>
>>>>
>>>>
>>>> GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of: <[
>>>> mydomain.com;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
>>>> GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
>>>> with target Machine and event 0xabc
>>>> GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User
>>>> = machine, changenumber = 0
>>>> GPSVC(374.7d8) 18:13:26:467 Target = Machine
>>>> GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User =
>>>> machine, changenumber = 0
>>>> GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting
>>>> with status = 0
>>>> GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the
>>>> filter check and so will not be applied.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi <
>>>> xxxxxxxxxxxxxxxx> wrote:
>>>>
>>>> Today I got my hands only WMI filtering for the first time. I created a
>>>> wmi filter with below content and applied to a OU where users are residing.
>>>> It's basically a user policy and my intention is to apply this policy when
>>>> the user logins to windows 7 machines only.
>>>>
>>>>
>>>>
>>>> root\CIMv2;select * from Win32_OperatingSystem where Caption =
>>>> "Microsoft Windows 7 Enterprise".
>>>>
>>>>
>>>>
>>>> Though everything looks fine, this GPO is not getting applied when the
>>>> user logins to windows 7 machine. I verified the windows 7 machine version
>>>> using below command and its matching. Can any one help me in solving this? I
>>>> enabled debug logging in win7 machine and looked at the logs and it has
>>>> entries saying that "GPO does not pass the filter check; so will not be
>>>> applied".
>>>>
>>>>
>>>>
>>>> C:\>wmic os get caption
>>>> Caption
>>>> Microsoft Windows 7 Enterprise
>>>>
>>>>
>>>> C:\>
>>>>
>>>> Thanks,
>>>>
>>>> Sitaram
>>>>
>>>> www.techibee.com
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>> --
>>>
>>> This message contains proprietary, privileged, and/or confidential information
>>> solely for the use of the individual(s) to which it is addressed. If you
>>> received this message in error or are not the intended recipient, please notify
>>> the sender by reply e-mail and delete and destroy the message.
>>>
>>>
>>>
>>
>
This message contains proprietary, privileged, and/or confidential information
solely for the use of the individual(s) to which it is addressed. If you
received this message in error or are not the intended recipient, please notify
the sender by reply e-mail and delete and destroy the message.
| | | |
| DarraghOShaughnessy
Posts:177
| | 02/02/2010 1:49 PM |
| ??
There is, it's called 'Version' not ''OS Version''
Regards,
Darragh O'Shaughnessy
IT Services Department
E-Mail: xxxxxxxxxxxxxxxx
<mailto:xxxxxxxxxxxxxxxx>
Ext: 2562
Direct Dial In: 01-7994028
Web Site: www.vhi.ie
Help the environment. If you need to print this email consider using Eco
Font to save ink: http://www.ecofont.eu/ecofont_en.html
<http://www.ecofont.eu/ecofont_en.html>
This e-mail and any files transmitted with it contain information which
may be confidential and which may also be privileged and is intended
solely for the use of the individual or entity to whom it is addressed.
Unless you are the intended recipient you may not copy or use it, or
disclose it to anyone else. Any opinions expressed are that of the
individual and not necessarily that of Vhi Healthcare. If you have
received this e-mail in error please notify the sender by return. This
footnote also confirms that this e-mail message has been Swept for the
presence of computer viruses.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Sitaram Pamarthi
Sent: 02 February 2010 13:13
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] WMi filter failure
There is no such property named "OS version" in Win32_OperatingSystem
Class. Are you referring me to some other class? Also caption contains
the operating system name. I don't see any problems in using that as it
is giving accurate results when ran across multiple operating systems.
On Tue, Feb 2, 2010 at 6:38 PM, Darragh O'Shaughnessy
<xxxxxxxxxxxxxxxx> wrote:
Would it not be better to use the OS version instead of caption?
Regards,
Darragh O'Shaughnessy
IT Services Department
E-Mail: xxxxxxxxxxxxxxxx
Ext: 2562
Direct Dial In: 01-7994028
Web Site: www.vhi.ie <http://www.vhi.ie/>
Help the environment. If you need to print this email consider using Eco
Font to save ink: http://www.ecofont.eu/ecofont_en.html
This e-mail and any files transmitted with it contain information which
may be confidential and which may also be privileged and is intended
solely for the use of the individual or entity to whom it is addressed.
Unless you are the intended recipient you may not copy or use it, or
disclose it to anyone else. Any opinions expressed are that of the
individual and not necessarily that of Vhi Healthcare. If you have
received this e-mail in error please notify the sender by return. This
footnote also confirms that this e-mail message has been Swept for the
presence of computer viruses.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Sitaram Pamarthi
Sent: 02 February 2010 13:06
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] WMi filter failure
log entries from gpsvc.log
-------------------------------------
GPSVC(374.e24) 18:13:25:952 FilterCheck: Found WMI Filter id of:
<[mydomain.com <http://mydomain.com/>
;{A98C235E-CE73-4454-B198-7D0259D9BBE6};0]>
GPSVC(208.27c) 18:13:26:451 CGPNotify::RegisterForNotification: Entering
with target Machine and event 0xabc
GPSVC(208.27c) 18:13:26:451 Client_InitialRegisterForNotification: User
= machine, changenumber = 0
GPSVC(374.7d8) 18:13:26:467 Target = Machine
GPSVC(208.27c) 18:13:26:467 Client_RegisterForNotification: User =
machine, changenumber = 0
GPSVC(208.27c) 18:13:26:467 CGPNotify::RegisterForNotification: Exiting
with status = 0
GPSVC(374.e24) 18:13:26:483 ProcessGPO: The GPO does not pass the
filter check and so will not be applied.
On Tue, Feb 2, 2010 at 6:29 PM, Sitaram Pamarthi
<xxxxxxxxxxxxxxxx> wrote:
Today I got my hands only WMI filtering for the first time. I created a
wmi filter with below content and applied to a OU where users are
residing. It's basically a user policy and my intention is to apply this
policy when the user logins to windows 7 machines only.
root\CIMv2;select * from Win32_OperatingSystem where Caption =
"Microsoft Windows 7 Enterprise".
Though everything looks fine, this GPO is not getting applied when the
user logins to windows 7 machine. I verified the windows 7 machine
version using below command and its matching. Can any one help me in
solving this? I enabled debug logging in win7 machine and looked at the
logs and it has entries saying that "GPO does not pass the filter check;
so will not be applied".
C:\>wmic os get caption
Caption
Microsoft Windows 7 Enterprise
C:\>
Thanks,
Sitaram
www.techibee.com <http://www.techibee.com/>
| | | |
|
|