question

MattBurgos-4681 avatar image
0 Votes"
MattBurgos-4681 asked FanFan-MSFT commented

Automate WMI Filter to add laptops to an AD Security group.

Hello,

I have created a GPO to disable RDP on laptop clients only. I want to define a WMI filter and apply to the GPO which would only allow it to add laptops. The GPO would link to specific OU's which contain computer objects. However, the WMI filter in GPMG is not working correctly. I can run the WMI query locally on a machine, remotely and it works.

What is the proper method to have the WMI filter apply the GPO to laptops only?

any help is appreciated.

windows-active-directorywindows-group-policy
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
As this thread has been quiet for a while,
If this question has any update?
If you have any questions or concerns about it, please don't hesitate to let us know.
Best Regards,

0 Votes 0 ·

1 Answer

FanFan-MSFT avatar image
1 Vote"
FanFan-MSFT answered FanFan-MSFT commented

Hi,
Welcome to ask here!
For Laptop GPO WMI Filters to find a laptop: If the battery status is not equal to zero ( BatteryStatus <> 0 ) then you know that it is a laptop
SELECT * FROM Win32_Battery WHERE (BatteryStatus <> 0)
https://discoposse.com/2012/04/05/group-policy-wmi-filter-laptop-or-desktop-hardware/
This response contains a third-party link. We provide this link for easy reference. Microsoft cannot guarantee the validity of any information and content in this link.

Best Regards,

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
 
Best Regards,

0 Votes 0 ·