locked
WMI Filtering for Current Time of log-in? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Good Day! I just like to ask if I could set a gpo that will be applied based from the time the user logged in? Example, disable his usb or internet options from 9-6pm. Can wmi filtering do this? If yes, is it possible to help me with the syntax? tnx a lot guys.

    Friday, January 20, 2012 8:25 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Keep in mind that Preferences doesn't always allow the user to change the setting. I blogged about this a while back (http://www.sdmsoftware.com/general-stuff/group-policy-policy-vs-preferences-what-does-it-all-mean/). It reallly depends upon the setting and frankly, I think you will have a hard time enforcing time restrictions with WMI Filters, simply because GP is not going to see any changes that would cause it to run every time, which is what you would need for WMI filters to work.

     

    Darren

    Darren Mar-Elia MS-MVP, Group Policy
    www.gpoguy.com
    www.sdmsoftware.com - "The Group Policy Experts"
    Sunday, January 22, 2012 9:04 PM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi,

    If your DC is 2008/2008R2 you can use item-level targeting/New item/time range http://technet.microsoft.com/en-us/library/cc733022.aspx with a group policy preferences.

    Bechir Gharbi | http://myitforum.com/myitforumwp/community/members/bgharbi/ | Time zone : GMT+1
    Friday, January 20, 2012 8:59 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hello. Thanks for the advise and I think it will work. However, isn't preferences allows users to change the settings once configured? Also, what's the preferred solution to I revert the settings after 6pm? Is it to implement another gpo with the different settings? Thanks again.
    Sunday, January 22, 2012 12:53 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Howdie!
     
    Am 22.01.2012 13:53, schrieb Emman20:
    > Hello. Thanks for the advise and I think it will work. However, isn't
    > preferences allows users to change the settings once configured? Also,
    > what's the preferred solution to I revert the settings after 6pm? Is it
    > to implement another gpo with the different settings? Thanks again.
     >ou are correct, users can revert the Preferences you put in place.
     
    So if you want to nail the settings, a WMI filter is your best choice.
    You would have to filter for the machine's local time.
     
    Depending on the GPO, the user might have to logoff/logon in order to
    see the GPO change - so it won't magically change everything automatically.
     
    Florian
     
    The views and opinions expressed in my postings do NOT necessarily correlate with the ones of my friends, family or my employer. If anyone should be allowed to mark a response as an "answer", it should be the thread creator. No one else.
    Sunday, January 22, 2012 3:49 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Keep in mind that Preferences doesn't always allow the user to change the setting. I blogged about this a while back (http://www.sdmsoftware.com/general-stuff/group-policy-policy-vs-preferences-what-does-it-all-mean/). It reallly depends upon the setting and frankly, I think you will have a hard time enforcing time restrictions with WMI Filters, simply because GP is not going to see any changes that would cause it to run every time, which is what you would need for WMI filters to work.

     

    Darren

    Darren Mar-Elia MS-MVP, Group Policy
    www.gpoguy.com
    www.sdmsoftware.com - "The Group Policy Experts"
    Sunday, January 22, 2012 9:04 PM