WMI Filters to be used in GPO

Technical reference for WMI Filters to be used in GPO.

Reference

This example of WMI filters to be used in GPOs to avoid applying to all users:

File presence:

 SELECT * FROM CIM_Datafile Where Name = 'C:\\Program Files (x86)\\Endpoint Security\\cpda.exe'

OS version (10.% for Win10/11/Server) and 6.2% for Win8:

 SELECT * FROMWin32_OperatingSystem where Version like "6.%"
 ... where Version like "6.1%" or Version like "6.2%"

Virtual machines:

SELECT Model FROM Win32_ComputerSystem WHERE Model LIKE "%VMware%"

Computer name:

SELECT * FROM Win32_ComputerSystem WHERE Name <> 'OR2660'
SELECT * FROM Win32_OperatingSystem WHERE Version like "10.%"

Computers with more than 4GB of memory:

Select * from WIN32_ComputerSystem where TotalPhysicalMemory >= 4200000000

Computers with a specific program installed:

Select * From Win32_Product where Name like "%7-Zip %"

See also

• Microsoft