Automate WMI Filter to add laptops to an AD Security group.

Question

Hello,

I have created a GPO to disable RDP on laptop clients only. I want to define a WMI filter and apply to the GPO which would only allow it to add laptops. The GPO would link to specific OU's which contain computer objects. However, the WMI filter in GPMG is not working correctly. I can run the WMI query locally on a machine, remotely and it works.

What is the proper method to have the WMI filter apply the GPO to laptops only?

any help is appreciated.

Answer 1

Hi,
Welcome to ask here!
For Laptop GPO WMI Filters to find a laptop: If the battery status is not equal to zero ( BatteryStatus <> 0 ) then you know that it is a laptop
SELECT * FROM Win32_Battery WHERE (BatteryStatus <> 0)
https://discoposse.com/2012/04/05/group-policy-wmi-filter-laptop-or-desktop-hardware/
This response contains a third-party link. We provide this link for easy reference. Microsoft cannot guarantee the validity of any information and content in this link.

Best Regards,

Answer 2

This also works: Select * from Win32_ComputerSystem WHERE (PCSystemType = 2 or PCSystemType = 3) or Select * from Win32_ComputerSystem WHERE (PCSystemType = 1) or (PCSystemType = 3)