Microsoft DirectAccess Group Policy WMI Filter Explained

Click here for other Direct Access related articles.

So when you setup DirectAccess by default it applies to only Laptops. In the documentation it states that this is done by a WMI filter but that’s it. So digging a bit deeper I found that it creates a WMI filter in Group Policy called “DirectAccess – Laptop only WMI filter” and adds the “DirectAccess Client Settings” GPO to that filter. Below I break down what the filter is and give some information on how you can create your own WMI filter for Group Policies.

This is the WMI Group policy created by DirectAcess:

The first Part selects only laptops.

Namespace: root\CIMV2

select * from Win32_ComputerSystem where PCSystemType = 2

The second part filters OS Types and Product SKUs.

Namespace: root\CIMV2

Select * from Win32_OperatingSystem WHERE (ProductType = 3) OR (Version LIKE ‘6.2%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 72 OR OperatingSystemSKU = 84)) OR (Version LIKE ‘6.1%’ AND (OperatingSystemSKU = 4 OR OperatingSystemSKU = 27 OR OperatingSystemSKU = 70 OR OperatingSystemSKU = 1 OR OperatingSystemSKU = 28 OR OperatingSystemSKU = 71))

So the filter evaluates to: laptops “PCSystemType = 2” and server “ProductType = 3″ or
Windows 2012, Windows 8 “Version LIKE ‘6.2%’” and Enterprise Edition “OperatingSystemSKU = 4″ or Enterprise N or Server Enterprise (evaluation installation) or Enterprise N (evaluation installation) or Windows 2008 R2, Windows 7 “Version LIKE ‘6.1%'” and Enterprise Edition or Enterprise N or Enterprise E or Ultimate or Ultimate N or Ultimate E.

So I am not sure why they are including server maybe just in case we have it installed on a laptop and want to use DirectAccess but never the less this is how it evaluates out.

How I got this information:

Below is where I found this info. I have put it here mainly for my own reference because I have not found another blog site where all this is all in the same place.

PCSystemType:

Source link

Windows Server 2003, Windows XP, Windows 2000, Windows NT 4.0, and Windows Me/98/95: This property is not available.

Value	Meaning
0 (0x0)	Unspecified
1 (0x1)	Desktop
2 (0x2)	Mobile
3 (0x3)	Workstation
4 (0x4)	Enterprise Server
5 (0x5)	Small Office and Home Office (SOHO) Server
6 (0x6)	Appliance PC
7 (0x7)	Performance Server
8 (0x8)	Maximum

ProductType:

Source post

Value	Meaning
1	Work Station
2	Domain Controller
3	Server

Version:

This was pieced together from various sources on the internet.

Windows 10 Insider Preview  = 10.0%
Windows Server Technical Preview = 10.0%
Windows 8.1 = 6.3%
Windows Server 2012 R2 = 6.3%

Windows Server 2012 or Windows 8 = 6.2%

Windows Server 2008 R2 or Windows 7 = 6.1%

Windows Server 2008 or Windows Vista = 6.0%

Windows Server 2003 = 5.2%

Windows XP = 5.1%

Windows 2000 = 5.0%

OperatingSystemSKU:

So I pieced this together from this MSDN post and this incomplete post by converting the Hex numbers to decimal.

Stock Keeping Unit (SKU) number for the operating system.

Windows Server 2003, Windows XP, Windows 2000, and Windows NT 4.0: This property is not available.

Version	OperatingSystemSKU
An unknown product	0
Ultimate	1
Home Basic	2
Home Premium	3
Enterprise	4
Home Basic N	5
Business	6
Server Standard	7
Server Datacenter (full installation)	8
Windows Small Business Server	9
Server Enterprise (full installation)	10
Starter	11
Server Datacenter (core installation)	12
Server Standard (core installation)	13
Server Enterprise (core installation)	14
Server Enterprise for Itanium-based Systems	15
Business N	16
Web Server (full installation)	17
HPC Edition	18
Windows Storage Server 2008 R2 Essentials	19
Storage Server Express	20
Storage Server Standard	21
Storage Server Workgroup	22
Storage Server Enterprise	23
Windows Server 2008 for Windows Essential Server Solutions	24
Small Business Server Premium	25
Home Premium N	26
Enterprise N	27
Ultimate N	28
Web Server (core installation)	29
Windows Essential Business Server Management Server	30
Windows Essential Business Server Security Server	31
Windows Essential Business Server Messaging Server	32
Server Foundation	33
Windows Home Server 2011	34
Windows Server 2008 without Hyper-V for Windows Essential Server Solutions	35
Server Standard without Hyper-V	36
Server Datacenter without Hyper-V (full installation)	37
Server Enterprise without Hyper-V (full installation)	38
Server Datacenter without Hyper-V (core installation)	39
Server Standard without Hyper-V (core installation)	40
Server Enterprise without Hyper-V (core installation)	41
Microsoft Hyper-V Server	42
Storage Server Express (core installation)	43
Storage Server Standard (core installation)	44
Storage Server Workgroup (core installation)	45
Storage Server Enterprise (core installation)	46
Starter N	47
Professional	48
Professional N	49
Windows Small Business Server 2011 Essentials	50
Server For SB Solutions	51
Server Solutions Premium	52
Server Solutions Premium (core installation)	53
Server For SB Solutions EM	54
Server For SB Solutions EM	55
Windows MultiPoint Server	56
Windows Essential Server Solution Management	59
Windows Essential Server Solution Additional	60
Windows Essential Server Solution Management SVC	61
Windows Essential Server Solution Additional SVC	62
Small Business Server Premium (core installation)	63
Server Hyper Core V	64
Starter E	66
Home Basic E	67
Home Premium E	68
Professional E	69
Enterprise E	70
Ultimate E	71
Server Enterprise (evaluation installation)	72
Windows MultiPoint Server Standard (full installation)	76
Windows MultiPoint Server Premium (full installation)	77
Server Standard (evaluation installation)	79
Server Datacenter (evaluation installation)	80
Enterprise N (evaluation installation)	84
Storage Server Workgroup (evaluation installation)	95
Storage Server Standard (evaluation installation)	96
Windows 8 N	98
Windows 8 China	99
Windows 8 Single Language	100
Windows 8	101
Professional with Media Center	103

What the letters mean at the end of Windows products:

Source link

Windows 7 N:

Meant for European market, and includes the same functionality as Windows 7, except that it does not include Windows Media Player and related technologies such as Windows Movie Maker.

Windows 7 K:

Meant for Korean market, and includes the same functionality as ordinary Windows 7, except that it includes links to a Media Player Center Web site and a Messenger Center Web site.

Windows 7 KN:

Meant for Korean market, and includes the same functionality as Windows 7 K, except that it does not include Windows Media Player and related technologies such as Windows Movie Maker, links to download Windows Live Messenger, or links to a Media Player Center Web Site and a Messenger Center Web site.

Windows 7 E:

Meant for European Commission countries, including UK, and includes the same functionality as ordinary standard flavor of Windows 7, except that it does not include Internet Explorer 8 (IE8)