Best way to filter a GPO


  • Hi

    I wonder if someone could advise on the best way to filter a GPO, mainly from a performance point of view.

    The majority of our estate is Windows 7 currently, although we are going to start rolling out some Windows 8.1 devices and then probably following that Windows 10 for testing. We have a few pieces of software which we don't want to deploy to an OS above Windows 7.

    I realise there are 2 ways I can achieve this, either Security Filtering or WMI filtering - which would be the recommended way with the least performance impact, a WMI filter or adding all Windows 8 machines to a Security Group and filtering on that until the balance tipped the other way?

    Wmi filter which I was going to use is simply:

    SELECT Version FROM Win32_OperatingSystem WHERE Version < "6.2"

    Thanks in advance

    • Edited by ijefferson Thursday, December 11, 2014 8:43 PM
    Thursday, December 11, 2014 8:36 PM


All replies