none
Direct Access Client Settings Denied (WMI Filter)

    Question

  • Anyone using Direct Access with Windows 10 Education version? When the GPO tries to apply to a windows 10 education edition laptop I get the following error in eventvwr: Direct Access Client Setting Denied (WMI Filter). It works fine with windows 10 enterprise and windows 7 enterprise clients. According to Microsoft, Windows 10 education does support Direct Access. So it should work.
    Friday, October 21, 2016 7:00 PM

Answers


  • OperatingSystemSKU
    121
    PCSystemType
    2

    ProductType
    1
    Version
    10.0.10586

    So I added "OperatingSystemSKU = 121" to the filter and everything works. I guess the default settings for the Direct Access WMI filter on Server 2016 do not include Windows 10 Education edition. Haven't tried the functionality of direct access on windows 10 education yet but at least the GP will get applied for now.

    Thanks for help!

    • Marked as answer by Frankford IT Wednesday, October 26, 2016 3:50 PM
    Wednesday, October 26, 2016 3:50 PM

All replies

  • Hi,

    Thanks for your post.

    Have you verified the Direct Access Client settings with GPRESULT /R on your Windows 10 Education?

    Have you tried running (from elevated command prompt) gpupdate /force or restarting the machine to have a test?

    General troubleshooting steps for your reference:

    7 steps for Troubleshooting DirectAccess Clients

    http://www.windowsnetworking.com/articles-tutorials/trouble/7-Steps-Troubleshooting-DirectAccess-Clients.html

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    If possible, please post the RSOP/GPRESULT report in our forum so that we could make further analysis.

    Thanks for your cooperation.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 24, 2016 8:17 AM
    Moderator
  • > Direct Access Client Setting Denied (WMI Filter).
     
    And what query does the WMI filter execute, that is linked to your DA GPO?
     
    Monday, October 24, 2016 10:43 AM
  • Tried rebooting and running gpupdate /force with elevated privileges. Get the following when running gpresult /r.

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            DirectAccess Client Settings
                Filtering:  Denied (WMI Filter)
                WMI Filter: DirectAccess - Laptop only WMI filter

     
    Monday, October 24, 2016 6:28 PM
  • >             WMI Filter: DirectAccess - Laptop only WMI filter
     
    Might help to answer my question: What query does this filter execute?
     
    Tuesday, October 25, 2016 9:05 AM
  • WMI Filter Query:

    select * from Win32_ComputerSystem where PCSystemType = 2

    Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR (((Version LIKE '6.[2-3]%') OR (Version LIKE  '[1-9][0-9].%')) AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE '6.1%' AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))

    Tuesday, October 25, 2016 7:01 PM
  • > select * from Win32_ComputerSystem where PCSystemType = 2
    >
    > Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR
    > (((Version LIKE '6.[2-3]%') OR (Version LIKE  '[1-9][0-9].%')) AND
    > (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU
    > = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE '6.1%' AND
    > (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU
    > = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR
    > OperatingSystemSKU = 71))
     
    And what PCSystemtype/ProductType/Version/OperatingSystemSKU does the
    laptop in question report?
     
    Wednesday, October 26, 2016 2:22 PM

  • OperatingSystemSKU
    121
    PCSystemType
    2

    ProductType
    1
    Version
    10.0.10586

    So I added "OperatingSystemSKU = 121" to the filter and everything works. I guess the default settings for the Direct Access WMI filter on Server 2016 do not include Windows 10 Education edition. Haven't tried the functionality of direct access on windows 10 education yet but at least the GP will get applied for now.

    Thanks for help!

    • Marked as answer by Frankford IT Wednesday, October 26, 2016 3:50 PM
    Wednesday, October 26, 2016 3:50 PM