none
WMI Filter for Internet explorer 10 and 11 RRS feed

  • Question

  • Hi Team,

    can someone provide me the WMI filter query for Internet explorer 10 and 11? I am currently implementing IE 11 in our environment and want to limit the IE 11 policies on the machines where IE 11 is installed. However, current IE 10 policies are not filtered on any WMI filter with IE 10 so need to know the WMI filters for IE 10 and IE 11. I am quiet new in WMI query and WBEMTEST.

    Regards,

    Sanjib 

    Friday, June 19, 2015 2:50 PM

Answers

  • 

    Got the query. it should be

    Namespace : root\CIMv2

    Query should be :

    SELECT * FROM CIM_DATAFILE WHERE NAME= 'C:\\PROGRAM FILES\\INTERNET EXPLORER\IEXPLORE.EXE' AND VERSION LIKE '10.%'

    Tuesday, June 23, 2015 10:52 AM

All replies

  • WMI filter query for Internet explorer 10 and 11?

    Interesting question.  FWIW I would try using  PowerShell  instead of either WBEMTest or WMIC. In fact, I would try using its ISE in order to take advantage of its IntelliSense or AutoCompletion.  However, even standard PowerShell can help discover stuff using its "Tab completion" or suggestions created that way.

    First I imagine we would need to pick a Namespace.  Any guesses from these?

    PS> Get-WMIObject -ClassName __NAmespace -Namespace "ROOT" -List -Recurse | sort __NAMESPACE | ft __NAMESPACE -AutoSize -HideTableHeaders
    
    

    HTH

    PS> Get-WMIObject -ClassName __NAmespace -Namespace "ROOT" -List -Recurse | sort __NAMESPACE | ft __NAMESPACE



    Robert Aldwinckle
    ---


    Saturday, June 20, 2015 4:02 PM
    Answerer
  • can someone provide me the WMI filter query for Internet explorer 10 and 11? I am currently implementing IE 11 in our environment and want to limit the IE 11 policies on the machines where IE 11 is installed. However, current IE 10 policies are not filtered on any WMI filter with IE 10 so need to know the WMI filters for IE 10 and IE 11. I am quiet new in WMI query and WBEMTEST.

    Group Policy Preferences has a couple of different methods to achieve this, but, if you are using "Classic" Group Policy, here are some examples, mostly using the CIM_DataFile class to examine the internal file version header. (which is basically how GPP-IE does the version differentiation)

    http://serverfault.com/questions/554797/wmi-filter-for-internet-explorer-10

    https://marckean.wordpress.com/2010/04/25/group-policy-wmi-operating-system-filtering/

    http://woshub.com/group-policy-filtering-using-wmi-filters/

    You should test this logic, since some values are stored as numbers, and some values are stored as strings. When comparing strings, "11" is not greater than "9", so, you may be best to use string comparison operators e.g. LIKE
    https://social.technet.microsoft.com/Forums/en-US/6623759d-f0d6-4cca-93ce-d56acb0ffa05/gpo-wmi-filter-for-ie11?forum=winserverGP

    Also, since your question relates to Group Policy and WMI Filtering, the dedicated Group Policy forum might attract deeper GP and WMI expertise;
    https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverGP

    Also, I prefer to use "WMI Explorer" instead of wbemtest (wbemtest is not easy to use ;)


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)




    • Edited by DonPick Saturday, June 20, 2015 11:42 PM
    Saturday, June 20, 2015 11:38 PM
  • prefer to use "WMI Explorer"

    Thanks for the tip.   Which one?   <eg>



    Robert Aldwinckle
    ---

    Sunday, June 21, 2015 12:03 PM
    Answerer
  • prefer to use "WMI Explorer"

    Thanks for the tip.   Which one?   <eg>



    Robert Aldwinckle
    ---


    I use this one https://wmie.codeplex.com/

    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

    Sunday, June 21, 2015 8:54 PM
  • 

    Got the query. it should be

    Namespace : root\CIMv2

    Query should be :

    SELECT * FROM CIM_DATAFILE WHERE NAME= 'C:\\PROGRAM FILES\\INTERNET EXPLORER\IEXPLORE.EXE' AND VERSION LIKE '10.%'

    Tuesday, June 23, 2015 10:52 AM
  • 

    Got the query.

    Neat.   Now instead of telling people about Help, About (Alt-H, A) I can suggest.

    wmic.exe PATH CIM_DATAFILE where (Name="C:\\Program Files\\Internet Explorer\\iexplore.exe") GET Version

    I checked with Context command and found the default Namespace is  root\cimv2  already.



    Robert Aldwinckle
    ---

    Tuesday, June 23, 2015 8:32 PM
    Answerer
  •  instead of telling people about Help, About

    No?  It's not the same.  Help About is showing me  11.0.9600.17842.  WMIC is only showing me 11.0.9600.17840.

    Aha.  msinfo32.exe Loaded Modules and sorting by version shows Help, About may be reporting mshtml.dll

    PS>wmic.exe --% PATH CIM_DATAFILE where (Name="C:\\Windows\\System32\\mshtml.dll") GET Version
    Version
    11.0.9600.17842
    Wonderful!  Thanks for making me find that. 



    Robert Aldwinckle
    ---

    Tuesday, June 23, 2015 8:44 PM
    Answerer