| Author | Messages | |
john.vanmeter
Posts:41
 | | 08/24/2010 5:51 PM |
| When I deployed the FDCC settings for IE7, I used a single GPO and the
following WMI filter so it would only apply to IE7
SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like
"Windows Internet Explorer 7"
I now have a single GPO that configures IE8 based on the USGCB
settings. I was hoping to use the following WMI filter
SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like
"Windows Internet Explorer 8" This doensn't work.
Is there some Win32reg_ I can call that works for Windows 7 and
Windows 2008 R2? I also create a Select statement that queried for
the file version of iexplore.exe but I was concerned that it may cause
delays while it enumerated the file version.
I have a single GPO that contains numerious settings so I can't see a
Preference working, and workstations with IE7 and IE8 are all mixed in
together. A push in the right direction would be great to help get me
started
Take Care and Have Fun ::John
| | | |
| dmarelia
Posts:394
| | 08/24/2010 6:06 PM |
| John-
Did you try querying your IE 8 client with a "Select * FROM Win32Reg_AddRemovePrograms" to see if IE even registers as an instance in this class? I did a quick check on a system I have here and I didn't see IE 8 listed.
Darren
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
Sent: Tuesday, August 24, 2010 9:16 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] WMI Filter Question
When I deployed the FDCC settings for IE7, I used a single GPO and the
following WMI filter so it would only apply to IE7
SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like
"Windows Internet Explorer 7"
I now have a single GPO that configures IE8 based on the USGCB
settings. I was hoping to use the following WMI filter
SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like
"Windows Internet Explorer 8" This doensn't work.
Is there some Win32reg_ I can call that works for Windows 7 and
Windows 2008 R2? I also create a Select statement that queried for
the file version of iexplore.exe but I was concerned that it may cause
delays while it enumerated the file version.
I have a single GPO that contains numerious settings so I can't see a
Preference working, and workstations with IE7 and IE8 are all mixed in
together. A push in the right direction would be great to help get me
started
Take Care and Have Fun ::John
| | | |
| JamieNelson
Posts:166
| | 08/24/2010 6:18 PM |
| The Win32Reg_AddRemovePrograms class is simply an enumeration of everything that appears in the Add/Remove Program applet in Control Panel (which is just a view of the registry basically). This class is only present when the SMS/SCCM client is installed on the system. So, your problem could be that a) SMS/SCCM is not installed or b) Windows Internet Explorer 8 does not show up in Add/Remove programs.
You should be able to use the MicrosoftIE_Summary class to get this information. However, keep in mind this in the root\cimv2\Applications\MicrosoftIE namespace so be sure to use that when setting up the filter. Your query would be something like this:
IE8 Only - SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
IE7 or IE8 - SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '⏚].%'
See the following Scripting Guys blog post for more details:
http://blogs.technet.com/b/heyscriptingguy/archive/2005/03/09/how-can-i-determine-which-version-of-internet-explorer-is-installed-on-a-computer.aspx
Just out of curiosity, why are you separating out settings based on IE version? I am familiar with FDCC, but don't remember this being necessary.
Regards,
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: 405.552.8054 | Mobile: 405.248.7963 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
Sent: Tuesday, August 24, 2010 11:16 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] WMI Filter Question
When I deployed the FDCC settings for IE7, I used a single GPO and the following WMI filter so it would only apply to IE7
SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like "Windows Internet Explorer 7"
I now have a single GPO that configures IE8 based on the USGCB settings. I was hoping to use the following WMI filter SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like "Windows Internet Explorer 8" This doensn't work.
Is there some Win32reg_ I can call that works for Windows 7 and Windows 2008 R2? I also create a Select statement that queried for the file version of iexplore.exe but I was concerned that it may cause delays while it enumerated the file version.
I have a single GPO that contains numerious settings so I can't see a Preference working, and workstations with IE7 and IE8 are all mixed in together. A push in the right direction would be great to help get me started
Take Care and Have Fun ::John
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| john.vanmeter
Posts:41
| | 08/24/2010 6:33 PM |
| Yea I could never get it to work I also seam to remember a URL from a google search that said internet explorer 8 was remove from MOF
Best Regards ::John van Meter
Never be afraid to try something new. Remember amateurs built the Ark, Professionals built the Titanic.
Sent from my iPhone
On Aug 24, 2010, at 12:32 PM, Darren Mar-Elia <xxxxxxxxxxxxxxxx> wrote:
> John-
> Did you try querying your IE 8 client with a "Select * FROM Win32Reg_AddRemovePrograms" to see if IE even registers as an instance in this class? I did a quick check on a system I have here and I didn't see IE 8 listed.
>
> Darren
>
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
> Sent: Tuesday, August 24, 2010 9:16 AM
> To: xxxxxxxxxxxxxxxx
> Subject: [gptalk] WMI Filter Question
>
> When I deployed the FDCC settings for IE7, I used a single GPO and the
> following WMI filter so it would only apply to IE7
>
> SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like
> "Windows Internet Explorer 7"
>
> I now have a single GPO that configures IE8 based on the USGCB
> settings. I was hoping to use the following WMI filter
> SELECT * FROM Win32Reg_AddRemovePrograms where DisplayName like
> "Windows Internet Explorer 8" This doensn't work.
>
> Is there some Win32reg_ I can call that works for Windows 7 and
> Windows 2008 R2? I also create a Select statement that queried for
> the file version of iexplore.exe but I was concerned that it may cause
> delays while it enumerated the file version.
>
> I have a single GPO that contains numerious settings so I can't see a
> Preference working, and workstations with IE7 and IE8 are all mixed in
> together. A push in the right direction would be great to help get me
> started
>
> Take Care and Have Fun ::John
>
| | | |
| JamieNelson
Posts:166
| | 08/24/2010 7:40 PM |
| Well you can only have one version of IE installed so there shouldn’t be any need to have a compound statement like that.
If you want to filter for only IE 7 systems, use:
SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘7.%’
If you want to filter for only IE 8 systems, use:
SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘8.%’
If you want to filter for either IE 7 or IE 8, use:
SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘⏚].%’
Regards,
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
Sent: Tuesday, August 24, 2010 12:04 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] WMI Filter Question
Thank I also noticed on my XP workstation that the install of IE8 never removed the regkey IE7 it just hide it so it did show up in addremove programs so do you think this would work
SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7' AND Version <> Like '8'
Best Regards ::John van Meter
Never be afraid to try something new. Remember amateurs built the Ark, Professionals built the Titanic.
Sent from my iPhone
On Aug 24, 2010, at 12:40 PM, "Nelson, Jamie" <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>> wrote:
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| john.vanmeter
Posts:41
| | 08/25/2010 12:43 PM |
| Good Morning Everyone,
I have a GPO with the USGCB settings for IE8 and I'm trying to apply
it to a Windows Server 2008 R2 x64. Im using the wmi filter that Jamie
posted
SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘8.%’
When I run a gpresult, its should that the GPO is still being denied
becasue of the WMI filter.
I loaded scriptomatic on my Windows Server 2008 R2 x64, and under
root\cim2 WMI Classes I don't see MicrosoftIE_Summary. I also look
for root\CIMV2\Applications\MicrosoftIE
and couldn't find it.
I was reading the following thread
http://www.gpanswers.com/community/2-everything-else/2335-apply-gpo-only-ie8-throught-filtering.html
that had the following
"For reasons unknown, the IE team removed the WMI namespace for IE
with IE version 8. To add it back you need to add a custom .MOF file
on your client computers and then recompile the WMI repository using
mofcomp.exe.
Here is the sample .MOF file you can use.
=========
#pragma autorecover
#pragma namespace ("\\\\.\\Root\\CimV2\\Applications")
instance of __Namespace
{
Name = "MicrosoftIE";
};
#pragma namespace ("\\\\.\\root\\CimV2\\Applications\\MicrosoftIE ")
[DYNPROPS]
class MicrosoftIE_Summary
{
[key] string Name="";
string Version;
};
[DYNPROPS]
instance of MicrosoftIE_Summary
{
Name = "Internet Explorer";
[PropertyContext("local|hkey_local_Machine\\softwar
e\\Microsoft\\Internet
Explorer|Version"),Dynamic,Provider("RegPropProv")] Version;
};
=========="
Any ideas?
Take Care and have fun ::John
On Tue, Aug 24, 2010 at 2:03 PM, Nelson, Jamie <xxxxxxxxxxxxxxxx> wrote:
> Well you can only have one version of IE installed so there shouldn’t be any
> need to have a compound statement like that.
>
>
>
> If you want to filter for only IE 7 systems, use:
>
>
>
> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘7.%’
>
>
>
> If you want to filter for only IE 8 systems, use:
>
>
>
> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘8.%’
>
>
>
> If you want to filter for either IE 7 or IE 8, use:
>
>
>
> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE ‘⏚].%’
>
>
>
> Regards,
>
>
>
> Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy
> Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
> http://www.dvn.com
>
>
>
> From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
> On Behalf Of John van Meter
> Sent: Tuesday, August 24, 2010 12:04 PM
>
> To: xxxxxxxxxxxxxxxx
> Subject: Re: [gptalk] WMI Filter Question
>
>
>
> Thank I also noticed on my XP workstation that the install of IE8 never
> removed the regkey IE7 it just hide it so it did show up in addremove
> programs so do you think this would work
>
> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7' AND Version <>
> Like '8'
>
>
>
> Best Regards ::John van Meter
>
> Never be afraid to try something new. Remember amateurs built the Ark,
> Professionals built the Titanic.
>
>
>
> Sent from my iPhone
>
> On Aug 24, 2010, at 12:40 PM, "Nelson, Jamie" <xxxxxxxxxxxxxxxx> wrote:
>
> Confidentiality Warning: This message and any attachments are intended only
> for the use of the intended recipient(s), are confidential, and may be
> privileged. If you are not the intended recipient, you are hereby notified
> that any review, retransmission, conversion to hard copy, copying,
> circulation or other use of all or any portion of this message and any
> attachments is strictly prohibited. If you are not the intended recipient,
> please notify the sender immediately by return e-mail, and delete this
> message and any attachments from your system.
>
> ________________________________
| | | |
| davesharples
Posts:55
| | 08/25/2010 12:48 PM |
| What's the question, did you add the .MOF file and then recompile?
>-----Original Message-----
>From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
>Sent: 25 August 2010 12:30 PM
>To: xxxxxxxxxxxxxxxx
>Subject: Re: [gptalk] WMI Filter Question
>
>Good Morning Everyone,
>
> I have a GPO with the USGCB settings for IE8 and I'm trying to apply
>it to a Windows Server 2008 R2 x64. Im using the wmi filter that Jamie
>posted
>
>SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>
>When I run a gpresult, its should that the GPO is still being denied
>becasue of the WMI filter.
>
>I loaded scriptomatic on my Windows Server 2008 R2 x64, and under
>root\cim2 WMI Classes I don't see MicrosoftIE_Summary. I also look
>for root\CIMV2\Applications\MicrosoftIE
> and couldn't find it.
>
>I was reading the following thread
>http://www.gpanswers.com/community/2-everything-else/2335-apply-gpo-
>only-ie8-throught-filtering.html
>that had the following
>"For reasons unknown, the IE team removed the WMI namespace for IE
>with IE version 8. To add it back you need to add a custom .MOF file
>on your client computers and then recompile the WMI repository using
>mofcomp.exe.
>
>Here is the sample .MOF file you can use.
>
>=========
>#pragma autorecover
>#pragma namespace ("\\\\.\\Root\\CimV2\\Applications")
>
>instance of __Namespace
>{
>Name = "MicrosoftIE";
>};
>
>#pragma namespace ("\\\\.\\root\\CimV2\\Applications\\MicrosoftIE ")
>
>[DYNPROPS]
>class MicrosoftIE_Summary
>{
>[key] string Name="";
>string Version;
>};
>
>[DYNPROPS]
>instance of MicrosoftIE_Summary
>{
>Name = "Internet Explorer";
>[PropertyContext("local|hkey_local_Machine\\softwar
>e\\Microsoft\\Internet
>Explorer|Version"),Dynamic,Provider("RegPropProv")] Version;
>};
>
>=========="
>
>
>Any ideas?
>
>Take Care and have fun ::John
>
>On Tue, Aug 24, 2010 at 2:03 PM, Nelson, Jamie <xxxxxxxxxxxxxxxx>
>wrote:
>> Well you can only have one version of IE installed so there shouldn't be any
>> need to have a compound statement like that.
>>
>>
>>
>> If you want to filter for only IE 7 systems, use:
>>
>>
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7.%'
>>
>>
>>
>> If you want to filter for only IE 8 systems, use:
>>
>>
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>
>>
>>
>> If you want to filter for either IE 7 or IE 8, use:
>>
>>
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '⏚].%'
>>
>>
>>
>> Regards,
>>
>>
>>
>> Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy
>> Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
>> http://www.dvn.com
>>
>>
>>
>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>xxxxxxxxxxxxxxxx]
>> On Behalf Of John van Meter
>> Sent: Tuesday, August 24, 2010 12:04 PM
>>
>> To: xxxxxxxxxxxxxxxx
>> Subject: Re: [gptalk] WMI Filter Question
>>
>>
>>
>> Thank I also noticed on my XP workstation that the install of IE8 never
>> removed the regkey IE7 it just hide it so it did show up in addremove
>> programs so do you think this would work
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7' AND Version
><>
>> Like '8'
>>
>>
>>
>> Best Regards ::John van Meter
>>
>> Never be afraid to try something new. Remember amateurs built the Ark,
>> Professionals built the Titanic.
>>
>>
>>
>> Sent from my iPhone
>>
>> On Aug 24, 2010, at 12:40 PM, "Nelson, Jamie" <xxxxxxxxxxxxxxxx>
>wrote:
>>
>> Confidentiality Warning: This message and any attachments are intended
>only
>> for the use of the intended recipient(s), are confidential, and may be
>> privileged. If you are not the intended recipient, you are hereby notified
>> that any review, retransmission, conversion to hard copy, copying,
>> circulation or other use of all or any portion of this message and any
>> attachments is strictly prohibited. If you are not the intended recipient,
>> please notify the sender immediately by return e-mail, and delete this
>> message and any attachments from your system.
>>
>> ________________________________
| | | |
| john.vanmeter
Posts:41
| | 08/25/2010 1:52 PM |
| No
just because someone posted it in a blog doesn't make it the correct thing to do. I was hoping to hear some feedback from the group on what they think or might have done
Best Regards ::John van Meter
Never be afraid to try something new. Remember amateurs built the Ark, Professionals built the Titanic.
On Aug 25, 2010, at 7:32 AM, Dave Sharples <xxxxxxxxxxxxxxxx> wrote:
> What's the question, did you add the .MOF file and then recompile?
>
>> -----Original Message-----
>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>> xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
>> Sent: 25 August 2010 12:30 PM
>> To: xxxxxxxxxxxxxxxx
>> Subject: Re: [gptalk] WMI Filter Question
>>
>> Good Morning Everyone,
>>
>> I have a GPO with the USGCB settings for IE8 and I'm trying to apply
>> it to a Windows Server 2008 R2 x64. Im using the wmi filter that Jamie
>> posted
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>
>> When I run a gpresult, its should that the GPO is still being denied
>> becasue of the WMI filter.
>>
>> I loaded scriptomatic on my Windows Server 2008 R2 x64, and under
>> root\cim2 WMI Classes I don't see MicrosoftIE_Summary. I also look
>> for root\CIMV2\Applications\MicrosoftIE
>> and couldn't find it.
>>
>> I was reading the following thread
>> http://www.gpanswers.com/community/2-everything-else/2335-apply-gpo-
>> only-ie8-throught-filtering.html
>> that had the following
>> "For reasons unknown, the IE team removed the WMI namespace for IE
>> with IE version 8. To add it back you need to add a custom .MOF file
>> on your client computers and then recompile the WMI repository using
>> mofcomp.exe.
>>
>> Here is the sample .MOF file you can use.
>>
>> =========
>> #pragma autorecover
>> #pragma namespace ("\\\\.\\Root\\CimV2\\Applications")
>>
>> instance of __Namespace
>> {
>> Name = "MicrosoftIE";
>> };
>>
>> #pragma namespace ("\\\\.\\root\\CimV2\\Applications\\MicrosoftIE ")
>>
>> [DYNPROPS]
>> class MicrosoftIE_Summary
>> {
>> [key] string Name="";
>> string Version;
>> };
>>
>> [DYNPROPS]
>> instance of MicrosoftIE_Summary
>> {
>> Name = "Internet Explorer";
>> [PropertyContext("local|hkey_local_Machine\\softwar
>> e\\Microsoft\\Internet
>> Explorer|Version"),Dynamic,Provider("RegPropProv")] Version;
>> };
>>
>> =========="
>>
>>
>> Any ideas?
>>
>> Take Care and have fun ::John
>>
>> On Tue, Aug 24, 2010 at 2:03 PM, Nelson, Jamie <xxxxxxxxxxxxxxxx>
>> wrote:
>>> Well you can only have one version of IE installed so there shouldn't be any
>>> need to have a compound statement like that.
>>>
>>>
>>>
>>> If you want to filter for only IE 7 systems, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7.%'
>>>
>>>
>>>
>>> If you want to filter for only IE 8 systems, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>>
>>>
>>>
>>> If you want to filter for either IE 7 or IE 8, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '⏚].%'
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy
>>> Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
>>> http://www.dvn.com
>>>
>>>
>>>
>>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>> xxxxxxxxxxxxxxxx]
>>> On Behalf Of John van Meter
>>> Sent: Tuesday, August 24, 2010 12:04 PM
>>>
>>> To: xxxxxxxxxxxxxxxx
>>> Subject: Re: [gptalk] WMI Filter Question
>>>
>>>
>>>
>>> Thank I also noticed on my XP workstation that the install of IE8 never
>>> removed the regkey IE7 it just hide it so it did show up in addremove
>>> programs so do you think this would work
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7' AND Version
>> <>
>>> Like '8'
>>>
>>>
>>>
>>> Best Regards ::John van Meter
>>>
>>> Never be afraid to try something new. Remember amateurs built the Ark,
>>> Professionals built the Titanic.
>>>
>>>
>>>
>>> Sent from my iPhone
>>>
>>> On Aug 24, 2010, at 12:40 PM, "Nelson, Jamie" <xxxxxxxxxxxxxxxx>
>> wrote:
>>>
>>> Confidentiality Warning: This message and any attachments are intended
>> only
>>> for the use of the intended recipient(s), are confidential, and may be
>>> privileged. If you are not the intended recipient, you are hereby notified
>>> that any review, retransmission, conversion to hard copy, copying,
>>> circulation or other use of all or any portion of this message and any
>>> attachments is strictly prohibited. If you are not the intended recipient,
>>> please notify the sender immediately by return e-mail, and delete this
>>> message and any attachments from your system.
>>>
>>> ________________________________
| | | |
| dmarelia
Posts:394
| | 08/25/2010 3:02 PM |
| Creating a custom MOF and compiling is not a bad thing if the underlying provider still exists. Its just not a very scaleable solution if you have to do it across all of your desktops. I did a quick search on my Win7 box using WMIX and it does not appear that there is anything resembling an IE namespace in there, so barring the MOF approach, you would be stuck with other, more indirect ways of testing for IE8.
Darren
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
Sent: Wednesday, August 25, 2010 5:13 AM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] WMI Filter Question
No
just because someone posted it in a blog doesn't make it the correct thing to do. I was hoping to hear some feedback from the group on what they think or might have done
Best Regards ::John van Meter
Never be afraid to try something new. Remember amateurs built the Ark, Professionals built the Titanic.
On Aug 25, 2010, at 7:32 AM, Dave Sharples <xxxxxxxxxxxxxxxx> wrote:
> What's the question, did you add the .MOF file and then recompile?
>
>> -----Original Message-----
>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>> xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
>> Sent: 25 August 2010 12:30 PM
>> To: xxxxxxxxxxxxxxxx
>> Subject: Re: [gptalk] WMI Filter Question
>>
>> Good Morning Everyone,
>>
>> I have a GPO with the USGCB settings for IE8 and I'm trying to apply
>> it to a Windows Server 2008 R2 x64. Im using the wmi filter that Jamie
>> posted
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>
>> When I run a gpresult, its should that the GPO is still being denied
>> becasue of the WMI filter.
>>
>> I loaded scriptomatic on my Windows Server 2008 R2 x64, and under
>> root\cim2 WMI Classes I don't see MicrosoftIE_Summary. I also look
>> for root\CIMV2\Applications\MicrosoftIE
>> and couldn't find it.
>>
>> I was reading the following thread
>> http://www.gpanswers.com/community/2-everything-else/2335-apply-gpo-
>> only-ie8-throught-filtering.html
>> that had the following
>> "For reasons unknown, the IE team removed the WMI namespace for IE
>> with IE version 8. To add it back you need to add a custom .MOF file
>> on your client computers and then recompile the WMI repository using
>> mofcomp.exe.
>>
>> Here is the sample .MOF file you can use.
>>
>> =========
>> #pragma autorecover
>> #pragma namespace ("\\\\.\\Root\\CimV2\\Applications")
>>
>> instance of __Namespace
>> {
>> Name = "MicrosoftIE";
>> };
>>
>> #pragma namespace ("\\\\.\\root\\CimV2\\Applications\\MicrosoftIE ")
>>
>> [DYNPROPS]
>> class MicrosoftIE_Summary
>> {
>> [key] string Name="";
>> string Version;
>> };
>>
>> [DYNPROPS]
>> instance of MicrosoftIE_Summary
>> {
>> Name = "Internet Explorer";
>> [PropertyContext("local|hkey_local_Machine\\softwar
>> e\\Microsoft\\Internet
>> Explorer|Version"),Dynamic,Provider("RegPropProv")] Version;
>> };
>>
>> =========="
>>
>>
>> Any ideas?
>>
>> Take Care and have fun ::John
>>
>> On Tue, Aug 24, 2010 at 2:03 PM, Nelson, Jamie <xxxxxxxxxxxxxxxx>
>> wrote:
>>> Well you can only have one version of IE installed so there shouldn't be any
>>> need to have a compound statement like that.
>>>
>>>
>>>
>>> If you want to filter for only IE 7 systems, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7.%'
>>>
>>>
>>>
>>> If you want to filter for only IE 8 systems, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>>
>>>
>>>
>>> If you want to filter for either IE 7 or IE 8, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '⏚].%'
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy
>>> Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
>>> http://www.dvn.com
>>>
>>>
>>>
>>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>> xxxxxxxxxxxxxxxx]
>>> On Behalf Of John van Meter
>>> Sent: Tuesday, August 24, 2010 12:04 PM
>>>
>>> To: xxxxxxxxxxxxxxxx
>>> Subject: Re: [gptalk] WMI Filter Question
>>>
>>>
>>>
>>> Thank I also noticed on my XP workstation that the install of IE8 never
>>> removed the regkey IE7 it just hide it so it did show up in addremove
>>> programs so do you think this would work
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7' AND Version
>> <>
>>> Like '8'
>>>
>>>
>>>
>>> Best Regards ::John van Meter
>>>
>>> Never be afraid to try something new. Remember amateurs built the Ark,
>>> Professionals built the Titanic.
>>>
>>>
>>>
>>> Sent from my iPhone
>>>
>>> On Aug 24, 2010, at 12:40 PM, "Nelson, Jamie" <xxxxxxxxxxxxxxxx>
>> wrote:
>>>
>>> Confidentiality Warning: This message and any attachments are intended
>> only
>>> for the use of the intended recipient(s), are confidential, and may be
>>> privileged. If you are not the intended recipient, you are hereby notified
>>> that any review, retransmission, conversion to hard copy, copying,
>>> circulation or other use of all or any portion of this message and any
>>> attachments is strictly prohibited. If you are not the intended recipient,
>>> please notify the sender immediately by return e-mail, and delete this
>>> message and any attachments from your system.
>>>
>>> ________________________________
| | | |
| JamieNelson
Posts:166
| | 08/25/2010 3:53 PM |
| Must be Windows 7 thing. I am running IE 8 on Windows XP and I have still have the namespace there.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: 405.552.8054 | Mobile: 405.248.7963 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia
Sent: Wednesday, August 25, 2010 8:27 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] WMI Filter Question
Creating a custom MOF and compiling is not a bad thing if the underlying provider still exists. Its just not a very scaleable solution if you have to do it across all of your desktops. I did a quick search on my Win7 box using WMIX and it does not appear that there is anything resembling an IE namespace in there, so barring the MOF approach, you would be stuck with other, more indirect ways of testing for IE8.
Darren
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
Sent: Wednesday, August 25, 2010 5:13 AM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] WMI Filter Question
No
just because someone posted it in a blog doesn't make it the correct thing to do. I was hoping to hear some feedback from the group on what they think or might have done
Best Regards ::John van Meter
Never be afraid to try something new. Remember amateurs built the Ark, Professionals built the Titanic.
On Aug 25, 2010, at 7:32 AM, Dave Sharples <xxxxxxxxxxxxxxxx> wrote:
> What's the question, did you add the .MOF file and then recompile?
>
>> -----Original Message-----
>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>> xxxxxxxxxxxxxxxx] On Behalf Of John van Meter
>> Sent: 25 August 2010 12:30 PM
>> To: xxxxxxxxxxxxxxxx
>> Subject: Re: [gptalk] WMI Filter Question
>>
>> Good Morning Everyone,
>>
>> I have a GPO with the USGCB settings for IE8 and I'm trying to apply
>> it to a Windows Server 2008 R2 x64. Im using the wmi filter that
>> Jamie posted
>>
>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>
>> When I run a gpresult, its should that the GPO is still being denied
>> becasue of the WMI filter.
>>
>> I loaded scriptomatic on my Windows Server 2008 R2 x64, and under
>> root\cim2 WMI Classes I don't see MicrosoftIE_Summary. I also look
>> for root\CIMV2\Applications\MicrosoftIE
>> and couldn't find it.
>>
>> I was reading the following thread
>> http://www.gpanswers.com/community/2-everything-else/2335-apply-gpo-
>> only-ie8-throught-filtering.html
>> that had the following
>> "For reasons unknown, the IE team removed the WMI namespace for IE
>> with IE version 8. To add it back you need to add a custom .MOF file
>> on your client computers and then recompile the WMI repository using
>> mofcomp.exe.
>>
>> Here is the sample .MOF file you can use.
>>
>> =========
>> #pragma autorecover
>> #pragma namespace ("\\\\.\\Root\\CimV2\\Applications")
>>
>> instance of __Namespace
>> {
>> Name = "MicrosoftIE";
>> };
>>
>> #pragma namespace ("\\\\.\\root\\CimV2\\Applications\\MicrosoftIE ")
>>
>> [DYNPROPS]
>> class MicrosoftIE_Summary
>> {
>> [key] string Name="";
>> string Version;
>> };
>>
>> [DYNPROPS]
>> instance of MicrosoftIE_Summary
>> {
>> Name = "Internet Explorer";
>> [PropertyContext("local|hkey_local_Machine\\softwar
>> e\\Microsoft\\Internet
>> Explorer|Version"),Dynamic,Provider("RegPropProv")] Version;
>> };
>>
>> =========="
>>
>>
>> Any ideas?
>>
>> Take Care and have fun ::John
>>
>> On Tue, Aug 24, 2010 at 2:03 PM, Nelson, Jamie <xxxxxxxxxxxxxxxx>
>> wrote:
>>> Well you can only have one version of IE installed so there
>>> shouldn't be any need to have a compound statement like that.
>>>
>>>
>>>
>>> If you want to filter for only IE 7 systems, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7.%'
>>>
>>>
>>>
>>> If you want to filter for only IE 8 systems, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '8.%'
>>>
>>>
>>>
>>> If you want to filter for either IE 7 or IE 8, use:
>>>
>>>
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '⏚].%'
>>>
>>>
>>>
>>> Regards,
>>>
>>>
>>>
>>> Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon
>>> Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 |
>>> http://www.dvn.com
>>>
>>>
>>>
>>> From: xxxxxxxxxxxxxxxx [mailto:gptalk-
>> xxxxxxxxxxxxxxxx]
>>> On Behalf Of John van Meter
>>> Sent: Tuesday, August 24, 2010 12:04 PM
>>>
>>> To: xxxxxxxxxxxxxxxx
>>> Subject: Re: [gptalk] WMI Filter Question
>>>
>>>
>>>
>>> Thank I also noticed on my XP workstation that the install of IE8
>>> never removed the regkey IE7 it just hide it so it did show up in
>>> addremove programs so do you think this would work
>>>
>>> SELECT * FROM MicrosoftIE_Summary WHERE Version LIKE '7' AND
>>> Version
>> <>
>>> Like '8'
>>>
>>>
>>>
>>> Best Regards ::John van Meter
>>>
>>> Never be afraid to try something new. Remember amateurs built the
>>> Ark, Professionals built the Titanic.
>>>
>>>
>>>
>>> Sent from my iPhone
>>>
>>> On Aug 24, 2010, at 12:40 PM, "Nelson, Jamie" <xxxxxxxxxxxxxxxx>
>> wrote:
>>>
>>> Confidentiality Warning: This message and any attachments are
>>> intended
>> only
>>> for the use of the intended recipient(s), are confidential, and may
>>> be privileged. If you are not the intended recipient, you are hereby
>>> notified that any review, retransmission, conversion to hard copy,
>>> copying, circulation or other use of all or any portion of this
>>> message and any attachments is strictly prohibited. If you are not
>>> the intended recipient, please notify the sender immediately by
>>> return e-mail, and delete this message and any attachments from your system.
>>>
>>> ________________________________
| | | |
|
|