TechOnTip Weblog

Run book for Technocrats

Microsoft DirectAccess Group Policy WMI Filter Explained

Posted by Jason Heisley on June 18, 2013

Click here for other Direct Access related articles.

So when you setup DirectAccess by default it applies to only Laptops. In the documentation it states that this is done by a WMI filter but that’s it. So digging a bit deeper I found that it creates a WMI filter in Group Policy called “DirectAccess – Laptop only WMI filter” and adds the “DirectAccess Client Settings” GPO to that filter. Below I break down what the filter is and give some information on how you can create your own WMI filter for Group Policies.

This is the WMI Group policy created by DirectAcess:

The first Part selects only laptops.

Namespace: root\CIMV2

select * from Win32_ComputerSystem where PCSystemType = 2

The second part filters OS Types and Product SKUs.

Namespace: root\CIMV2

Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR (Version LIKE ‘6.2%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE ‘6.1%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))

So the filter evaluates to: laptops “PCSystemType = 2” and server “ProductType = 3″ or
Windows 2012, Windows 8 “Version LIKE ‘6.2%’” and Enterprise Edition “OperatingSystemSKU = 4″ or Enterprise N or Server Enterprise (evaluation installation) or Enterprise N (evaluation installation) or Windows 2008 R2, Windows 7 “Version LIKE ‘6.1%'” and Enterprise Edition or Enterprise N or Enterprise E or Ultimate or Ultimate N or Ultimate E.

So I am not sure why they are including server maybe just in case we have it installed on a laptop and want to use DirectAccess but never the less this is how it evaluates out.

How I got this information:

Below is where I found this info. I have put it here mainly for my own reference because I have not found another blog site where all this is all in the same place.

PCSystemType:

Source link

Windows Server 2003, Windows XP, Windows 2000, Windows NT 4.0, and Windows Me/98/95: This property is not available.

Value Meaning
0 (0x0) Unspecified
1 (0x1) Desktop
2 (0x2) Mobile
3 (0x3) Workstation
4 (0x4) Enterprise Server
5 (0x5) Small Office and Home Office (SOHO) Server
6 (0x6) Appliance PC
7 (0x7) Performance Server
8 (0x8) Maximum

ProductType:

Source post

Value Meaning
1 Work Station
2 Domain Controller
3 Server

Version:

This was pieced together from various sources on the internet.

Windows 10 Insider Preview  = 10.0%
Windows Server Technical Preview = 10.0%
Windows 8.1 = 6.3%
Windows Server 2012 R2 = 6.3%

Windows Server 2012 or Windows 8 = 6.2%

Windows Server 2008 R2 or Windows 7 = 6.1%

Windows Server 2008 or Windows Vista = 6.0%

Windows Server 2003 = 5.2%

Windows XP = 5.1%

Windows 2000 = 5.0%

OperatingSystemSKU:

So I pieced this together from this MSDN post and this incomplete post by converting the Hex numbers to decimal.

Stock Keeping Unit (SKU) number for the operating system.

Windows Server 2003, Windows XP, Windows 2000, and Windows NT 4.0: This property is not available.

Version

OperatingSystemSKU

An unknown product

0

Ultimate

1

Home Basic

2

Home Premium

3

Enterprise

4

Home Basic N

5

Business

6

Server Standard

7

Server Datacenter (full installation)

8

Windows Small Business Server

9

Server Enterprise (full installation)

10

Starter

11

Server Datacenter (core installation)

12

Server Standard (core installation)

13

Server Enterprise (core installation)

14

Server Enterprise for Itanium-based Systems

15

Business N

16

Web Server (full installation)

17

HPC Edition

18

Windows Storage Server 2008 R2 Essentials

19

Storage Server Express

20

Storage Server Standard

21

Storage Server Workgroup

22

Storage Server Enterprise

23

Windows Server 2008 for Windows Essential Server Solutions

24

Small Business Server Premium

25

Home Premium N

26

Enterprise N

27

Ultimate N

28

Web Server (core installation)

29

Windows Essential Business Server Management Server

30

Windows Essential Business Server Security Server

31

Windows Essential Business Server Messaging Server

32

Server Foundation

33

Windows Home Server 2011

34

Windows Server 2008 without Hyper-V for Windows Essential Server Solutions

35

Server Standard without Hyper-V

36

Server Datacenter without Hyper-V (full installation)

37

Server Enterprise without Hyper-V (full installation)

38

Server Datacenter without Hyper-V (core installation)

39

Server Standard without Hyper-V (core installation)

40

Server Enterprise without Hyper-V (core installation)

41

Microsoft Hyper-V Server

42

Storage Server Express (core installation)

43

Storage Server Standard (core installation)

44

Storage Server Workgroup (core installation)

45

Storage Server Enterprise (core installation)

46

Starter N

47

Professional

48

Professional N

49

Windows Small Business Server 2011 Essentials

50

Server For SB Solutions

51

Server Solutions Premium

52

Server Solutions Premium (core installation)

53

Server For SB Solutions EM

54

Server For SB Solutions EM

55

Windows MultiPoint Server

56

Windows Essential Server Solution Management

59

Windows Essential Server Solution Additional

60

Windows Essential Server Solution Management SVC

61

Windows Essential Server Solution Additional SVC

62

Small Business Server Premium (core installation)

63

Server Hyper Core V

64

Starter E

66

Home Basic E

67

Home Premium E

68

Professional E

69

Enterprise E

70

Ultimate E

71

Server Enterprise (evaluation installation)

72

Windows MultiPoint Server Standard (full installation)

76

Windows MultiPoint Server Premium (full installation)

77

Server Standard (evaluation installation)

79

Server Datacenter (evaluation installation)

80

Enterprise N (evaluation installation)

84

Storage Server Workgroup (evaluation installation)

95

Storage Server Standard (evaluation installation)

96

Windows 8 N

98

Windows 8 China

99

Windows 8 Single Language

100

Windows 8

101

Professional with Media Center

103

What the letters mean at the end of Windows products:

Source link

Windows 7 N:

Meant for European market, and includes the same functionality as Windows 7, except that it does not include Windows Media Player and related technologies such as Windows Movie Maker.

Windows 7 K:

Meant for Korean market, and includes the same functionality as ordinary Windows 7, except that it includes links to a Media Player Center Web site and a Messenger Center Web site.

Windows 7 KN:

Meant for Korean market, and includes the same functionality as Windows 7 K, except that it does not include Windows Media Player and related technologies such as Windows Movie Maker, links to download Windows Live Messenger, or links to a Media Player Center Web Site and a Messenger Center Web site.

Windows 7 E:

Meant for European Commission countries, including UK, and includes the same functionality as ordinary standard flavor of Windows 7, except that it does not include Internet Explorer 8 (IE8)

Advertisements

6 Responses to “Microsoft DirectAccess Group Policy WMI Filter Explained”

  1. Gérald said

    Thanks for these informations.

    The better explanation about the ProductType = 3 is because you can use a Windows Server 2008 R2 or Windows Server 2012 / 2012 R2 as a DirectAccess client if you want.

  2. Todd said

    Windows Server 2012r2 or Windows 8.1 (update) = 6.3%

  3. Joe Wright said

    Updated DA WMI query to work with Windows 10:

    Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR (Version LIKE ‘6.2%’ OR Version like ‘6.3%’ OR Version like ’10.%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE ‘6.1%’ OR Version like ‘6.3%’ OR Version like ’10.%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))

  4. […] of what these numbers actually mean, check out my colleague Jason’s post over at TechOnTip blog. He spent some time and did the hard work for […]

  5. […] SKU codes are explained here and here. 100 (0x64) stands […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: