pmuller

Update of schema was no problem, but - yes allways a but. Primary computer only has an effect on roaming app.data and folder redirection. So, I'm back to to square one. Is ti possible by use of wmi filter to identify if a machine is the primary computer of an user. In our school we often have the situation, that the teacher borrow his/her computer to another teacher or a student. If so they need a different GPO, eg. no caching of redirected flower, no rights to adjust.... etc. Any suggestions? Regards Peter

I have thought of that option. I'll check if it's possible to make the schema extension. I have only tried that ones before. Thanks

I need a specific GPO to be enforces when a staff uses his/her 'personal' computer As we are still using w2008R2 I'm not able to set primary computer attribute on an user in AD. During installation a script assign the specific AD-user of a personal computer. That information is stored in Registry and scirpt could also create a file like c:\contoso.com\john.user, ie. johan is username in AD... I'm looking for something linke this: Root\CIMv2 select * from CIM_Datafile Where Name = 'c:\\contoso.com\' + 'select UserName from Win32_ComputerSystem' + '.user' Would that be possible? /Peter PS: I'm aware that I could do standard security filtering by combining username and computername as security filtering parameters. But that would result in many GPO's