W
EB
F
ILTER
A
PPENDICES
S
ECTION
A
PPENDIX
D
502
M86 S
ECURITY
U
SER
G
UIDE
3. Link the new policy:
a. In the GPMC, select the domain or organizational unit
for which the policy should be applied.
b. Right-click, choose "Link an existing GPO", and then
select the new policy you created in step 2. Click
OK
.
c. Right-click the new policy in the tree, and then de-
select the "Link Enabled" menu checkmark. (The link
will be re-enabled later in this procedure.)
4. Create a filter for the policy:
A GPO filter limits the scope of the policy so that the
Mobile Client is only installed on the appropriate
computers. For example, you may want to install it on all
workstations but not servers. There are two types of
filters: Security filters and WMI filters.
To create a Security filter
:
a. Select the new policy link. Note the "Security Filtering"
section in the Scope panel to the right.
b. Click "Authenticated Users" and then "Remove".
c. Click "Add...", and then click "Object Types". Check the
"Computers" type and uncheck the "Users" type. Click
OK
.
d. Enter the names of all the computers to receive the
Mobile Client installation, separated by semicolons.
(Alternatively, you can select a User or Computer
group created previously—details of group creation
are beyond the scope of this procedure. Click
OK
.
To create a WMI filter
:
WMI filters are capable of applying very sophisticated
selection criteria to set the scope of a policy. See
Microsoft Knowledgebase article #555253 for details on
creating WMI filters:
