6.7 Working with WMI Filters

Windows Management Instrumentation (WMI) filters let you dynamically detect the scope of Group Policy objects (GPOs), based on the attributes of the targeted computer.

For example, to ensure that each GPO associated with a group can only be applied to devices running the correct version of Windows, assign WMI filters to the GPO. Although you can create a separate membership group for each GPO, you would then have to manage the memberships of the different groups. Instead, use only a single membership group, and let WMI filters automatically ensure the correct GPO is applied to each device.

To create a WMI filter:

  1. Expand the target domain, and locate the WMI Filters node in the domain’s tree.

  2. Right-click the WMI Filters node, and select New WMI Filter.

  3. Provide a name and description for the filter.

  4. Add at least one query. To learn about creating queries, see WMI Queries.

  5. Click Save.

To import a WMI filter:

  1. Expand the target domain and locate the WMI Filters node in the domain’s tree.

  2. Right-click the WMI Filters node and select Import.

After creating or importing a WMI filter, you can perform the following actions against it:

  • Edit

  • Export

  • Copy

  • Delete

  • Rename

  • Backup

  • View its properties

  • Link to GPOs

  • Delegate permissions to users or groups

To perform an action against a WMI filter, right-click it and select the desired action.

To export a WMI filter:

  1. Expand the target domain, and locate the WMI Filters node in the domain’s tree.

  2. Right-click a filter, and select Export.

  3. Locate the directory where you want to save the filter, and click Save.

To link a WMI filter to a GPO:

  1. Expand the target domain, and locate the WMI Filters node in the domain’s tree.

  2. Expand the WMI Filters node, and click the desired filter.

  3. In the General tab of the filter configuration, right-click in the GPO pane and select Add.

  4. Select a GPO from the Group Policy objects, and click OK.

To delegate a WMI filter to a user or group:

  1. Expand the target domain, and locate the WMI Filters node in the domain’s tree.

  2. Expand the WMI Filters node, and click the desired filter.

  3. Select the Delegation tab in the filter configuration, and click the Add button at the bottom of the page.

  4. Enter, check, and select the object name, and click OK.