Group Policy Filtering

[Norphy]

I've written a couple of group policies. I want one to apply when a user logs onto a Windows 2000 machine and another to apply when they log on to an XP machine.

 

I can't use WMI filters to do this as 2000 doesn't support them. Any suggestions on how to implement this?

 

Cheers,

 

Norphy

[GrumbleDook]

hmm ... at this point you are looking at applying them as computer policies first and then using loopback ...

 

I have always said that you should never touch loopback as it will come back to bite you in 2 years time (or bite someone else who is fixing things once you have gone, etc)

 

With GPMC it makes life easier to track but I have still seen it cause too many problems to be happy.

 

This has been discussed a few times on Mark Minasi's site in the forums ... http://www.minasi.com .

[Geoff]

I can't use WMI filters to do this as 2000 doesn't support them

 

WMI Filter support for Windows 2000

[Norphy]

Thanks for the suggestions!

 

In the end, I used a little bit of lateral thinking. The settings I wanted to do for the XP policy would only apply to XP machines as they were settings that 2000 didn't support. So what I did is create a WMI filter that said "Only apply if the OS is not Windows XP" and attached it to the 2000 policy. Being as 2000 doesn't support WMI natively (thanks Geoff, interesting link) it ignored that setting and applied the GPO. XP machines look at the WMI filter and don't apply it. 2000 machines apply both GPOs but being as the XP GPO only had XP settings in it, it doesn't hurt.

 

Marvellous