Microsoft DirectAccess Group Policy WMI Filter Explained
Posted by Jason Heisley on June 18, 2013
Click here for other Direct Access related articles.
So when you setup DirectAccess by default it applies to only Laptops. In the documentation it states that this is done by a WMI filter but that’s it. So digging a bit deeper I found that it creates a WMI filter in Group Policy called “DirectAccess – Laptop only WMI filter” and adds the “DirectAccess Client Settings” GPO to that filter. Below I break down what the filter is and give some information on how you can create your own WMI filter for Group Policies.
This is the WMI Group policy created by DirectAcess:
The first Part selects only laptops.
Namespace: root\CIMV2
select * from Win32_ComputerSystem where PCSystemType = 2
The second part filters OS Types and Product SKUs.
Namespace: root\CIMV2
Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR (Version LIKE ‘6.2%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE ‘6.1%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))
So the filter evaluates to: laptops “PCSystemType = 2” and server “ProductType = 3″ or
Windows 2012, Windows 8 “Version LIKE ‘6.2%’” and Enterprise Edition “OperatingSystemSKU = 4″ or Enterprise N or Server Enterprise (evaluation installation) or Enterprise N (evaluation installation) or Windows 2008 R2, Windows 7 “Version LIKE ‘6.1%'” and Enterprise Edition or Enterprise N or Enterprise E or Ultimate or Ultimate N or Ultimate E.
So I am not sure why they are including server maybe just in case we have it installed on a laptop and want to use DirectAccess but never the less this is how it evaluates out.
How I got this information:
Below is where I found this info. I have put it here mainly for my own reference because I have not found another blog site where all this is all in the same place.
PCSystemType:
Source link
Windows Server 2003, Windows XP, Windows 2000, Windows NT 4.0, and Windows Me/98/95: This property is not available.
Value | Meaning |
0 (0x0) | Unspecified |
1 (0x1) | Desktop |
2 (0x2) | Mobile |
3 (0x3) | Workstation |
4 (0x4) | Enterprise Server |
5 (0x5) | Small Office and Home Office (SOHO) Server |
6 (0x6) | Appliance PC |
7 (0x7) | Performance Server |
8 (0x8) | Maximum |
ProductType:
Source post
Value | Meaning |
1 | Work Station |
2 | Domain Controller |
3 | Server |
Version:
This was pieced together from various sources on the internet.
Windows 10 Insider Preview = 10.0%
Windows Server Technical Preview = 10.0%
Windows 8.1 = 6.3%
Windows Server 2012 R2 = 6.3%
Windows Server 2012 or Windows 8 = 6.2%
Windows Server 2008 R2 or Windows 7 = 6.1%
Windows Server 2008 or Windows Vista = 6.0%
Windows Server 2003 = 5.2%
Windows XP = 5.1%
Windows 2000 = 5.0%
OperatingSystemSKU:
So I pieced this together from this MSDN post and this incomplete post by converting the Hex numbers to decimal.
Stock Keeping Unit (SKU) number for the operating system.
Windows Server 2003, Windows XP, Windows 2000, and Windows NT 4.0: This property is not available.
Version |
OperatingSystemSKU |
An unknown product |
0 |
Ultimate |
1 |
Home Basic |
2 |
Home Premium |
3 |
Enterprise |
4 |
Home Basic N |
5 |
Business |
6 |
Server Standard |
7 |
Server Datacenter (full installation) |
8 |
Windows Small Business Server |
9 |
Server Enterprise (full installation) |
10 |
Starter |
11 |
Server Datacenter (core installation) |
12 |
Server Standard (core installation) |
13 |
Server Enterprise (core installation) |
14 |
Server Enterprise for Itanium-based Systems |
15 |
Business N |
16 |
Web Server (full installation) |
17 |
HPC Edition |
18 |
Windows Storage Server 2008 R2 Essentials |
19 |
Storage Server Express |
20 |
Storage Server Standard |
21 |
Storage Server Workgroup |
22 |
Storage Server Enterprise |
23 |
Windows Server 2008 for Windows Essential Server Solutions |
24 |
Small Business Server Premium |
25 |
Home Premium N |
26 |
Enterprise N |
27 |
Ultimate N |
28 |
Web Server (core installation) |
29 |
Windows Essential Business Server Management Server |
30 |
Windows Essential Business Server Security Server |
31 |
Windows Essential Business Server Messaging Server |
32 |
Server Foundation |
33 |
Windows Home Server 2011 |
34 |
Windows Server 2008 without Hyper-V for Windows Essential Server Solutions |
35 |
Server Standard without Hyper-V |
36 |
Server Datacenter without Hyper-V (full installation) |
37 |
Server Enterprise without Hyper-V (full installation) |
38 |
Server Datacenter without Hyper-V (core installation) |
39 |
Server Standard without Hyper-V (core installation) |
40 |
Server Enterprise without Hyper-V (core installation) |
41 |
Microsoft Hyper-V Server |
42 |
Storage Server Express (core installation) |
43 |
Storage Server Standard (core installation) |
44 |
Storage Server Workgroup (core installation) |
45 |
Storage Server Enterprise (core installation) |
46 |
Starter N |
47 |
Professional |
48 |
Professional N |
49 |
Windows Small Business Server 2011 Essentials |
50 |
Server For SB Solutions |
51 |
Server Solutions Premium |
52 |
Server Solutions Premium (core installation) |
53 |
Server For SB Solutions EM |
54 |
Server For SB Solutions EM |
55 |
Windows MultiPoint Server |
56 |
Windows Essential Server Solution Management |
59 |
Windows Essential Server Solution Additional |
60 |
Windows Essential Server Solution Management SVC |
61 |
Windows Essential Server Solution Additional SVC |
62 |
Small Business Server Premium (core installation) |
63 |
Server Hyper Core V |
64 |
Starter E |
66 |
Home Basic E |
67 |
Home Premium E |
68 |
Professional E |
69 |
Enterprise E |
70 |
Ultimate E |
71 |
Server Enterprise (evaluation installation) |
72 |
Windows MultiPoint Server Standard (full installation) |
76 |
Windows MultiPoint Server Premium (full installation) |
77 |
Server Standard (evaluation installation) |
79 |
Server Datacenter (evaluation installation) |
80 |
Enterprise N (evaluation installation) |
84 |
Storage Server Workgroup (evaluation installation) |
95 |
Storage Server Standard (evaluation installation) |
96 |
Windows 8 N |
98 |
Windows 8 China |
99 |
Windows 8 Single Language |
100 |
Windows 8 |
101 |
Professional with Media Center |
103 |
What the letters mean at the end of Windows products:
Source link
Windows 7 N:
Meant for European market, and includes the same functionality as Windows 7, except that it does not include Windows Media Player and related technologies such as Windows Movie Maker.
Windows 7 K:
Meant for Korean market, and includes the same functionality as ordinary Windows 7, except that it includes links to a Media Player Center Web site and a Messenger Center Web site.
Windows 7 KN:
Meant for Korean market, and includes the same functionality as Windows 7 K, except that it does not include Windows Media Player and related technologies such as Windows Movie Maker, links to download Windows Live Messenger, or links to a Media Player Center Web Site and a Messenger Center Web site.
Windows 7 E:
Meant for European Commission countries, including UK, and includes the same functionality as ordinary standard flavor of Windows 7, except that it does not include Internet Explorer 8 (IE8)
This entry was posted on June 18, 2013 at 3:32 pm and is filed under Direct Access, Windows 2012, WindowsServer. Tagged: OperatingSystemSKU, PCSystemType, ProductType. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.
Gérald said
Thanks for these informations.
The better explanation about the ProductType = 3 is because you can use a Windows Server 2008 R2 or Windows Server 2012 / 2012 R2 as a DirectAccess client if you want.
Todd said
Windows Server 2012r2 or Windows 8.1 (update) = 6.3%
Jason Heisley said
Yes, Thank You.
Joe Wright said
Updated DA WMI query to work with Windows 10:
Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR (Version LIKE ‘6.2%’ OR Version like ‘6.3%’ OR Version like ’10.%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE ‘6.1%’ OR Version like ‘6.3%’ OR Version like ’10.%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))
Make DirectAccess Work on Win 10 LTSB – Final Thoughts from IT said
[…] of what these numbers actually mean, check out my colleague Jason’s post over at TechOnTip blog. He spent some time and did the hard work for […]
Which Windows 8.1 edition am I running – Super User | digudc said
[…] SKU codes are explained here and here. 100 (0x64) stands […]