GPO WMI Filters for Windows 10 Build 15063, 14393,10586 and Windows 7

Question

_{Thursday, June 22, 2017 5:13 PM}

Hi,

I've still got windows 7 clients and they use gpo's with wmi filters.

Also i've got Windows 10 14393 and 10586 and they use this WMI filter: select * from Win32_OperatingSystem WHERE Version like "10.%" AND ProductType="1" which works fine.

but now i've got Windows 10 1703 builds and for this machines i've got a couple of new policies. And i want that those only applies for 1703.how to accomplish this?

So what i need is a WMI for:
windows 7
windows 10 14393 and 10586
windows 10 1703

Can someone help me.

thanks

All replies (5)

_{Friday, June 23, 2017 9:38 AM ✅Answered | 1 vote}

I'm using this and seems to work fine.

Windows 10 1703
select Version,ProductType from Win32_OperatingSystem WHERE Version like "10.0.15063” AND ProductType=”1″

Windows 10 1607 and 1511
select Version,ProductType from Win32_OperatingSystem WHERE Version like "10.0.14393" OR Version like "10.0.10586" AND ProductType="1"

_{Thursday, June 22, 2017 7:34 PM}

I've composed some examples which i don't knwo they work. need to test it.

But what do you think?

Windows 10 1703
select Version,ProductType from Win32_OperatingSystem WHERE Version like "10.0.15063” AND ProductType=”1″

OR

Select BuildNumber, ProductType from Win32_OperatingSystem where BuildNumber >= 15063 AND ProductType ="1"

Windows 10 1607 and 1511
select Version,ProductType from Win32_OperatingSystem WHERE Version like "10.0.14393" OR Version like "10.0.10586" AND ProductType="1"

Select BuildNumber, ProductType from Win32_OperatingSystem where BuildNumber <= 14393 AND ProductType ="1"

Windows 7
Select BuildNumber, ProductType from Win32_OperatingSystem where BuildNumber >= 7600 AND ProductType ="1"

Also found this on a Microsoft site, but don't understand the 0123456789 parts.

Select BuildNumber from Win32_OperatingSystem WHERE BuildNumber >= 10000 AND BuildNumber LIKE "%[123456789][0123456789][0123456789][0123456789][0123456789]%" OR BuildNumber >= 9200 AND BuildNumber LIKE "%[123456789][0123456789][0123456789][0123456789]%"

_{Friday, June 23, 2017 6:12 AM}

To have a WMI filter that matches Windows 7 or later (including Windows 10) then you need to use the following WMI filter:

select * from Win32_OperatingSystem where Version like “10.%” or Version >=”6.1″

This will evaluate true for Windows 10 AND any version of Windows greater that Windows 7 (6.1) as the report below shows.

For more information, please refer to this link below:

/en-us/windows/access-protection/windows-firewall/create-wmi-filters-for-the-gpo

Besides, WMI Group Policy filters that compare Win32_OperatingSystem BuildNumber don't work as expected on Windows 10

https://support.microsoft.com/en-us/help/3119213/wmi-group-policy-filters-that-compare-win32-operatingsystem-buildnumber-don-t-work-as-expected-on-windows-10

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, June 23, 2017 6:12 AM}

Windows 10 1703

select Version from Win32_OperatingSystem WHERE Version like “10.0.15063” AND ProductType=”1″ AND OSArchitecture = “64-bit”

select Version from Win32_OperatingSystem WHERE Version like “10.0.15063” AND ProductType=”1″ AND NOT OSArchitecture = “64-bit”

select Version from Win32_OperatingSystem WHERE Version like “10.0.15063” AND ProductType=”1″

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Tuesday, July 11, 2017 8:55 AM}

If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.
If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].