First of all, WMI filtering only works with WinXP/2003 servers (not sure about the 2003 part, but almost sure ). You make GPO's on a per-user or per-machine basis, applied through the OU's where the objects are contained.

BUT, you can change the way GPO's are applied when a user logs on to a server by using something called GPO Loopback processing, which can be done in two different modes: Merge or Replace. Read about the concept here for example: http://www.microsoft.com/resources/docum...ec_pol_KCMB.asp

btw; not all things will work as you might wish when using loopback processing. For example, loginscripts. You'll have to read up on this yourself as I'm not the right person to give lectures on the subject

btw; you're running 2000 or 2003 servers there?

Edited by masken (2005-08-16 04:54 PM)
_________________________
The tart is out there