Global Policy WMI Filter

[sgiovanni]

I would like to initiate a global policy object in Active Directory that would disable Windows XP SP2's firewall since we have a corporate firewall and all the SP2 firewall is doing is blocking internal ICMP traffice which is a pain since I can't ping for troubleshooting.

Thus I would like to add a WMI filter to check the chassis type (either desktop or laptop) to filter out laptops since they will be inside and outside of our corporate firewall.

Does anyone know how to do this?

 

[PScottC]

Wouldn't it be easier to put Laptops and Desktops in separate OU's in AD and then apply the policy to the Desktops only?

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[sgiovanni]

Hmm, good idea! Except it would be better the way I described because then it would be setup once and done forver, but with your solution I'll have to keep manually moving the laptops into that OU.

 

[PScottC]

The problem is that there is nothing in the OS that distinguishes a desktop system from a laptop. Unless you want to create a registry entry in the system and then try to read that with your WMI filter?

I think that the OU solution is easier than trying to get a registry entry installed on all of your laptops.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers