Working with WMI filters to assign GPOs
Previously in this chapter, we looked at how we can use OUs and security groups to filter our GPOs. This is useful in a lot of situations. If you have a neatly organized Active Directory environment, everything should be filed away into an appropriate group or OU. But what if you don't have a neatly organized OU, or if you want to filter your GPOs on something other than OU?
For example, you might have a GPO you only want applied to laptops, but your OUs are not organized and just dumps all laptops and desktops together into a single OU. Or perhaps you want to apply a GPO only to virtual machines, but there's no way to tell from Active Directory whether a machine is a virtual machine or not. Another common case is that you have a lot of computers in a single OU, but you only want to apply a GPO to machines that match a certain name.
The good news is that we can do this by using something called WMI filters. WMI stands for Windows...