You can also use Windows Management Instrumentation (WMI) filters to determine the scope of a GPO application. WMI filters do this based on the computer’s attributes to which the policy is being applied. When WMI filters are processed, the GPO is applied only if the filter evaluates to true.
WMI filters allow for granular access to apply GPOs to the specific computer or user level based on information from the target computer. For example, WMI can determine which services are running and apply only to computers with a specific service running, or WMI can be used to apply GPOs to certain types of computers. WMI can also examine the hardware configuration, registry, and other settings and can be applied based on its findings related to those settings.
The drawback to WMI filters is that they are evaluated each time Group Policy is processed, thus adding overhead to the logon time. Only one WMI filter is allowed per GPO.
Using Windows Management Instrumentation (WMI) filters
