WMI filter application

[Babscoole]

I have a GPO that applies a logOff VBScript under User Configuration. It is linked to the OU that standard users are in. The script just sets some settings for Outlook Express.

We just got our first lot of Vista workstations in and I'm getting the infrastructure set up for them. I do not want this GPO to apply if a user is on one of the new Vista machines, since OE has been supplanted by Windows Mail.

What I've tried so far is creating a WMI filter to check for OS version (SELECT * from Win32_OperatingSystem" WHERE Version < "6.1.6000"), but in testing this using Group Policy modeling the GPO was still applied. I'm assuming that this is due to trying to filter on a computer based bit of information to a User Config GPO.
Could also be that my syntax isn't quite right. If the problem here is the later, can anyone help me get the right query?

If the reason it's not working is due to the former, my next idea is to create a Vista Users Security Group for people assigned to the new workstations. Then creating a WMI filter to check for membership in that group. If I have to do this, can anyone help me with the syntax for the WQL query?

Thanks.

[PreviousPoster]

There's a lot of information on this out there, both on this forum and on other sites out there. Here's some examples on how to creates WMI filters:

HOWTO: Leverage Group Policies with WMI Filters
http://support.microsoft.com/kb/555253

Applying WMI Filters
http://technet2.microsoft.com/windowsserver/en/library/7cae3dab-b973-4905-9e47-00a638241da91033.mspx?mfr=true

How can I restrict the application of Group Policy Object (GPOs) depending on the client machine's OS?
http://www.windowsitpro.com/Articles/ArticleID/46475/46475.html

This is the best syntax for hitting Windows XP only:
Select * from Win32_OperatingSystem where Caption = "Microsoft Windows XP Professional"

If you want to hit a specific Security Group only you need to set security on the GPO instead - not WMI filtering. See this article:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/filter.mspx?mfr=true

[Babscoole]

Thank you Jacob. Should fit the bill quite nicely. I'll try out your filter and see what comes up with the modelling tool.

[AdamV]

I'm pretty sure that WMI filters are ignored by the GPMC modelling tool (if that's the one you mean).
You need to test on a real machine and use gpresult to see what it gets (use verbose mode to see details)

Also, if you still have 2000 machines, don't forget they completely ignore WMI, os they will apply any policy regardless.

[Babscoole]

Thanks for the info. Found an oddity with Vista in playing with this. Win32_OperatingSystem Caption returns a slightly mangled bit of data. Instead of Microsoft and Vista, then return value is Microsoftr and VistaT. Tried this on multiple vista versions from different sources and they all do this. *shrugs*. I'm assuming that using the LIKE operator is similar to an InStr search and "%Vista%" will return as true even though the actual value in the return string is VistaT.

[PreviousPoster]

Sorry - I didn't catch the one with the GP modelling tool, and I do of course agree with Adam!