Delegate an individual WMI filter using GPMC

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To delegate an individual WMI filter

Open Group Policy Management.
In the console tree, click the WMI filter you want to delegate permissions for.

Where?

Forest name/Domains/Domain name/WMI Filters/WMI filter name
In the results pane, click the Delegation tab, and then do one of the following:
- To add a new group or user with management permissions on the WMI filter
- To change the permissions levels on the WMI filter for a group or user in the permission list
- To remove a group or user from the permissions list for the WMI filter

Click Add.
In the Select User, Computer, or Group dialog box, click Object Types, select the types of objects to which you want to delegate permissions on the WMI filter, and then click OK.
Click Locations, select either Entire Directory or the domain or organizational unit containing the object to which you want to delegate permissions, and then click OK.
In the Enter the object name to select box, enter name of the object to which you want to delegate permissions by doing one of the following:
- If you know the name, type it, and then click OK.
- To search for the name, click Advanced, enter the search criteria, click Find Now, select the name in the list box, click OK, and then click OK.
In the Add Group or User dialog box, in the Permissions box, select the permissions level you want to assign to the group or user, and then click OK.

In the list box, right-click the name of the group or user, and then click Edit or Full Control to specify the permissions level you want to assign to that group or user.
When prompted to confirm the change, click OK.

In the list box, select the name of the group or user for which you want to have permissions removed, and then click Remove.
When prompted to confirm the removal of the delegation privilege, click OK.

Notes

You must have Full Control permissions on a WMI filter to change its permissions.
You cannot remove or change inherited permissions for WMI filters.
All users must have Read access to all WMI filters. Otherwise, Group Policy stops processing when it encounters a WMI filter that cannot be read.
You cannot use Group Policy Management to remove Read permissions from WMI filters.
To open Group Policy Management, click Start, click Programs, click Administrative Tools, and then click Group Policy Management.
WMI Filters is only available if at least one domain controller in the domain is running Windows Server 2003.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.