none
Group Policy - Wmi filter based on TimeZone

    Question

  • Hi Geeks/Gurus,

    I was testing a policy that creates users based on the Time Zone WMI Filter.

    So for specific Time Zone - the Local guy working in that office is added to all the local computers. (update once)

    The Wmi Filter is

    SELECT * FROM Win32_SystemTimeZone WHERE StandardName="India Standard Time"

    And in the GPP (Prefs) for computers the - Control Panel - Users - create local user has been added.

    The user is not created after a gpupdate /force and a reboot as well.

    The gpresult /r shows that the policy has not been applied to this machine.

    On the machine where the policy should have applied - I tried a local

    c:\wmic

    timezone

    Result : One of the property         StandardName     India Standard Time

    Can any one guide me where would I be going wrong?.

    JW


    Jack Wills Nothing but Group Policy and Exchange!

    Friday, January 15, 2016 8:10 PM

Answers

  • Hi,
     
    Am 15.01.2016 um 21:10 schrieb Jack Wills:
    > SELECT * FROM Win32_SystemTimeZone WHERE StandardName="India Standard Time"
     
    Just as a recommandation:
    Depending on the Language, the Name changes and will be localized. The
    filter reports "false" and than it does not apply.
     
    You better should use:
    SELECT * FROM Win32_ComputerSystem WHERE CurrentTimeZone = xx
     
    Where "xx" is a number, equal in all languages.
    e.g. middle european = 60
     
    But I think the reason, why the  user will be not created is:
    Password settings. After installing "MS14-025"m the password field in
    GPP is disabled. You can not create a user with empty password, if your
    domain policy requires at least 1 character.
    It´s not a policy problem, it will even not work with a script, without
    giving a valid password.
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    • Marked as answer by Jack Wills Sunday, January 17, 2016 7:05 PM
    Saturday, January 16, 2016 10:06 AM

All replies

  • Hi,
     
    Am 15.01.2016 um 21:10 schrieb Jack Wills:
    > SELECT * FROM Win32_SystemTimeZone WHERE StandardName="India Standard Time"
     
    Just as a recommandation:
    Depending on the Language, the Name changes and will be localized. The
    filter reports "false" and than it does not apply.
     
    You better should use:
    SELECT * FROM Win32_ComputerSystem WHERE CurrentTimeZone = xx
     
    Where "xx" is a number, equal in all languages.
    e.g. middle european = 60
     
    But I think the reason, why the  user will be not created is:
    Password settings. After installing "MS14-025"m the password field in
    GPP is disabled. You can not create a user with empty password, if your
    domain policy requires at least 1 character.
    It´s not a policy problem, it will even not work with a script, without
    giving a valid password.
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    • Marked as answer by Jack Wills Sunday, January 17, 2016 7:05 PM
    Saturday, January 16, 2016 10:06 AM
  • Hi Mark,

    In the GPP - while creating a user I do have the Password option.

    I will try with the other WMI filter option as mentioned. Lets see what I get from it.

    The password complexity has been removed from the Domain policy and it is no more a complex as a requirement.

    SELECT * FROM Win32_ComputerSystem WHERE CurrentTimeZone=330  This also did not help.

    Thanks fro your help in Anticipation.

    Any more suggestions ?


    Jack Wills - Group Policy / Powershell / MDT

    Sunday, January 17, 2016 7:01 PM
  • Hi Mark,

    You were right with the WMI filter that you suggested.

    It did work and what I needed was a bit of Patience :).

    Thanks,

    JW


    Jack Wills - Group Policy / Powershell / MDT

    Sunday, January 17, 2016 7:08 PM