2.1.3.1.5 WMI Filter Processing

When the Group Policy client has processed the GPO attributes returned by the Group Policy server and has determined that a policy object has a WMI query that applies to a GPO, the Group Policy client also has the location of that WMI filter in Active Directory. The Group Policy client then uses LDAP to query the Group Policy server for the WMI query by passing into the query the required location and attributes, as described in [MS-GPOL] section 2.2.5.

The Group Policy server replies with an LDAP response that returns the necessary attribute information, as described in [MS-GPOL] section 2.2.5. The Group Policy client processes the WMI query to determine which GPOs apply to it, as indicated by the WMI query.

If the WMI query cannot be evaluated due to a local Group Policy client error, the entire policy application mode sequence is terminated. If the WMI query returns no results, the GPO is denied; otherwise, the GPO is allowed, as described in [MS-GPOL] section 3.2.5.1.7.