Manage GPOs - MCSA Windows Server 2012 R2: Installation and Configuration Study Guide - page 309

set up a GPO to deploy the Office package (explained later in the section “Deploying Soft-
ware Through a GPO”).
You can then place a WMI script on the GPO stating that only computers with 10GB
of hard disk space actually deploy Office. Now if a computer has 10GB of free space,
the Office GPO would get installed. If the computer does not have the 10GB of hard
disk space, the GPO will not deploy. You can use WMI scripts to check for computer
information such as MAC addresses. WMI is a powerful tool because if you know how to
write scripts, the possibilities are endless. The following script is a sample of a WMI that is
checking for at least 10GB of free space on the C: partition/volume:

Select * from Win32_LogicalDisk where FreeSpace > 10737418240 AND
Caption = “C:”

Security Filtering of a Group Policy

Another method of securing access to GPOs is to set permissions on the GPOs themselves.
You can do this by opening the GPMC, selecting the GPO, and clicking the Advanced
button in the Delegation tab. The Unlinked Test GPO Security Settings dialog box appears
(see Figure 6.3).

fiGure 6.3 A GPO's Security Settings dialog box

The following permissions options are available:

■

Full Control

■

Read

■

Write