Partilhar via


Preference Item-Level Targeting Using the GPMC

This topic describes the Group Policy preference items and how to configure each using the Group Policy Management Console.

Introduction

You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers.

Each targeting item results in a value of either true or false. You can apply multiple targeting items to a preference item and select the logical operation (AND or OR) by which to combine each targeting item with the preceding one. If the combined value of all targeting items for a preference item is false, then the settings in the preference item are not applied to the user or computer. Using targeting collections, you can also create parenthetical expressions.

To target an existing preference item so it applies only to specific users or computers

  1. Open the Group Policy Management Console. Right-click the Group Policy Object (GPO) that should contain the new preference item, and then click Edit.

  2. In the console tree under Computer Configuration or User Configuration, expand the Preferences folder, and then browse to the preference extension.

  3. Double-click the node for the preference extension, and then right-click the preference item and click Properties.

  4. In the Properties dialog box, click the Common tab.

  5. Select Item-level targeting, and then click Targeting.

    1. Click New Item, click a type of targeting item to apply to the preference item, and then configure settings for the targeting item.

      Note

      To change the value of the targeting item to its opposite, on the Item Options menu, click Is Not.

      Text fields accept preference processing variables. Press F3 to display a list of variables from which you can select.

      To provide a custom name for the targeting item, on the Item Options menu, click Label, and type a Name.

      To provide a comment for a targeting item, on the Item Options menu, click Label, and type a Comment.

    2. If configuring multiple targeting items, on the Item Options menu, click the logical operation (And or Or) by which to combine the results of the preference item with the preceding preference item.

      Note

      To create a parenthetical expression, click Add Collection. (For more information, see Targeting Collection.)

    3. Repeat for each targeting item to apply.

  6. Click OK, and then click OK in the Properties dialog box.

Targeting collection

The targeting items applied to a preference item are evaluated as a logical expression. A targeting collection allows you create a parenthetical grouping within that expression. You can nest one targeting collection within another to create more complex logical expressions.

A targeting collection allows a preference item to be applied to computers or users only if the collection of targeting items specified results in a value of true. If Is Not is selected, it allows the preference item to be applied only if the collection of targeting items specified results in a value of false.

  • If you want to restrict the scope of multiple preference items with a complex set of targeting items, you can simplify configuration by using an environment variable. For example, create an Environment Variable preference item that generates a new environment variable with a value of 1, and apply the targeting items to it. To apply the same targeting to other preference items, add an Environment Variable targeting item to those preference items, and configure it to require a value of 1 for the variable that you created using an Environment Variable preference item.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Battery Present targeting

A Battery Present targeting item allows a preference item to be applied to computers or users only if one or more batteries are present in the processing computer. If Is Not is selected, it allows the preference item to be applied only if the processing computer does not have one or more batteries present.

Additional considerations

  • If an uninterruptible power supply (UPS) is connected to the processing computer, a Battery Present targeting item may detect the UPS and identify it as a battery.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • This targeting item can be useful for portable computer detection.

  • Preference items are available only in domain-based GPOs.

Computer Name targeting

A Computer Name targeting item allows a preference item to be applied to computers or users only if the computer's name matches the specified computer name in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the computer's name does not match the specified computer name in the targeting item.

Option Description
NetBIOS If this option is clicked, the targeting item compares the specified name to the NetBIOS name of the computer (as specified in the %ComputerName% variable).
DNS If this option is clicked, the targeting item resolves the specified name into one or more IP addresses using the Windows name resolution behavior in effect on the computer. The targeting item then compares the list of IP addresses obtained to all IP addresses bound to all network adapters on the computer. If a single match exists, the targeting item returns a value of true.
Note: You must choose either NetBIOS or DNS. There is no required format for the computer name except that it must be resolvable to an IP address.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.

  • Preference items are available only in domain-based GPOs.

CPU Speed (MHz) targeting

A CPU Speed targeting item allows a preference item to be applied to computers or users only if the processing computer's CPU speed is greater than or equal to the value specified in the targeting item (in megahertz, or MHz). If Is Not is selected, it allows the preference item to be applied only if the processing computer's CPU speed is less than or equal to the value specified in the targeting item.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Date match targeting

A Date Match targeting item allows a preference item to be applied to computers or users only if the day or date matches that specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the day or date does not match that specified in the targeting item.

Option Description
Weekly If you select this option, the preference item is applied only on the day of the week that you specify in the targeting item.
Monthly If you select this option, the preference item is applied only on the day that you specify in the targeting item.
On date If you select this option, the preference item is applied only on the date that you specify in the targeting item. If you select Every year, the preference item is applied each year only on the month and day that you specify.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Disk Space targeting

A Disk Space targeting item allows a preference item to be applied to computers or users only if the processing computer's available disk space is greater than or equal to the amount of free space specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing computer's available disk space is less than or equal to the amount of free space specified in the targeting item.

Option Description
Drive letter Either the system drive or a specific drive letter. The system drive option directs the targeting item to use the SYSTEMDRIVE environment variable to determine the drive letter. The specified drive letter may be a mapped network drive.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Domain targeting

A Domain targeting item allows a preference item to be applied to computers or users only if the user is logged on to or the computer is a member of the domain specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user is not logged on to or the computer is not a member of the domain specified in the targeting item.

Option Description
User logged on to domain If this option is clicked, the targeting item compares the specified domain name to the domain to which the end user is logged on. This is also the domain of which the end user is a member and uses the %LogonDomain% variable for comparison.

Note: This option is available only for preference items under User Configuration.
Computer in domain If this option is clicked, the targeting item compares the specified domain name with the domain to which the computer belongs. It uses the %DomainName% variable for comparison.

Note: You must choose either User logged on to domain or Computer in domain.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.

  • Preference items are available only in domain-based GPOs.

Environment Variable targeting

An Environment Variable targeting item allows a preference item to be applied to computers or users only if the environment variable name and value specified in the targeting item are equal. If Is Not is selected, it allows the preference item to be applied only if the environment variable name and value specified in the targeting item are not equal or if the environment variable does not exist.

Option Description
Value The value to compare to the specified environment variable.

Note: The Value box accepts preference processing variables. Press F3 to display a list of variables from which you can select.

Additional considerations

  • If you want to restrict the scope of multiple preference items with a complex set of targeting items, you can simplify configuration by using an environment variable. For example, create an Environment Variable preference item that generates a new environment variable with a value of 1, and apply the targeting items to it. To apply the same targeting to other preference items, add an Environment Variable targeting item to those preference items, and configure it to require a value of 1 for the variable that you created using an Environment Variable preference item.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

File Match targeting

A File Match targeting item allows a preference item to be applied to computers or users only if the file or folder specified in the targeting item exists, or only if the file exists and is a version within the range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the file or folder specified in the targeting item does not exist, or only if the version of the file is not within the range specified in the targeting item.

Option Description
Version range If you select Match file version, enter a version range to match. Each version segment must be greater than or equal to zero and less than or equal to 65535.

For example, to specify a version greater than or equal to 1.0 but less than 8.5.1, select >=, type 1 in the box on the left (replacing the first 0), select <, and replace the first three zeros in the box on the right with 8, 5, and 1.

The Version range is only displayed if you select Match file version.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

IP Address Range targeting

An IP Address Range targeting item allows a preference item to be applied to computers or users only if the processing computer's IP address is within the range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing computer's IP address is not within the range specified in the targeting item.

Option Description
IP address range The range against which the processing computer's IP address is compared. Range starting points and ending points are inclusive. You can specify a single address by typing the same value in both boxes.

Additional considerations

  • IPv6 addresses are not supported.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Language targeting

A Language targeting item allows a preference item to be applied to computers or users only if the locale specified in the targeting item is installed on the processing computer. Additional options allow you to restrict the targeting to the user's or computer's locale. If Is Not is selected, it allows the preference item to be applied only if the processing computer's locale does not match the specified locale in the targeting item.

Note

A locale is composed of a language and, in some cases, a geographic area in which the language is spoken or the alphabet used. For example, French (Canada) is a locale composed of the language French and the geographic area Canada.

Option Description
User If you select this check box, you restrict the targeting of the item to include the user's locale.

Important: This option is disabled in preference items under Computer Configuration.
System If you select this check box, you restrict the targeting of the item to include the locale of the operating system.
Native If you select this check box, you restrict the targeting of the item to include the specified locale of the file NTDLL.DLL.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

LDAP Query targeting

An LDAP Query targeting item allows a preference item to be applied to computers or users only if the LDAP query returns a value for the attribute specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the LDAP query does not return a value for the attribute specified in the targeting item.

Examples:

  • This example binds to the root of the namespace.
    LDAP:
  • This example binds to the root of the Global Catalog.
    GC:
  • This example binds to a specific server.
    LDAP://servername
  • This example binds to a specific container by its distinguished name.
    LDAP://CN=LabUser1,OU=LAB,DC=contoso,DC=com
Option Description
Attribute The specified attribute value returned from the search. Providing this value in the targeting item is optional.

This example shows how to specify the canonical name attribute.
Example: cn
Environment variable name The name of the environment variable to which the targeting item sets the value of the Attribute, if one is found. Providing this value in the targeting item is optional.

Important: This option supports only the following Active Directory data types. Other data types may succeed but return empty values.
  • ADSTYPE_DN_STRING
  • ADSTYPE_CASE_EXACT_STRING
  • ADSTYPE_CASE_IGNORE_STRING
  • ADSTYPE_PRINTABLE_STRING
  • ADSTYPE_NUMERIC_STRING
  • ADSTYPE_OBJECT_CLASS
  • ADSTYPE_BOOLEAN

Note: If the returned attribute value is a multivalued attribute, the first item in the list of values is assigned to the environment variable.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

  • LDAP Query targeting items use the subtree search option.

  • LDAP Query targeting items do not chase referrals.

MAC Address Range targeting

A MAC Address Range targeting item allows a preference item to be applied to computers or users only if any of the processing computer's MAC addresses are within the range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if none of the processing computer's MAC addresses are within the range specified in the targeting item.

Option Description
MAC address range The range against which the processing computer's MAC addresses are compared. Range starting points and ending points are inclusive. You can specify a single address by typing the same value in both boxes.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

MSI Query targeting

A Microsoft® Windows® Installer Query targeting item allows a preference item to be applied to computers or users only if certain aspects of a product, update, or component installed by Windows Installer on the processing computer match the specified criteria in the targeting item. If Is Not is selected, it allows the preference item to be applied only if certain aspects of a product, update, or component installed by Windows Installer on the processing computer do not match the specified criteria in the targeting item.

Option Description
Target type Defines the target of the Windows Installer query as an installed product, an installed update, or a component.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Network Connection targeting

A Network Connection targeting item allows a preference item to be applied to users only if a network connection of the type specified in the targeting item is connected. If Is Not is selected, it allows the preference item to be applied only if no network connection of the type specified in the targeting item is connected.

Note

Network Connection targeting items detect whether a type of network connection exists, not whether the user is logged on through a connection of that type.

Connection type The network connection type that the targeting item detects:
  • Any (includes only those network connection types listed below)
  • Telephone modem accessed through a COM port
  • ISDN card with corresponding NDISWAN driver installed
  • X.25 card with corresponding NDISWAN driver installed
  • Virtual Private Network (VPN)
  • Asynchronous Transfer Mode (ATM)
  • Frame Relay
  • Sonet
  • Switched 56K access
  • Infrared Data Association (IrDA) device
  • Serial Port direct connection
  • Parallel Port direct connection
  • Generic
  • Packet Assembler/Disassembler
  • PPP over Ethernet (PPPoE)

If Any is selected, the targeting item allows a preference item to be applied to users only if a network connection of at least one of the types in the Connection type list is connected. If Is Not is also selected, it allows the preference item to be applied only if no network connections of any of the connection types listed above are connected.

Additional considerations

  • Network Connection targeting is available only for preference items under User Configuration.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Operating System targeting

An Operating System targeting item allows a preference item to be applied to computers or users only if the processing computer's operating system's product name, release, edition, or computer role matches those specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the operating system's product name, release, edition, or computer role does not match those specified in the targeting item.

Option Description
Product The product name of the operating system.
Edition The edition of the product such as Enterprise, Standard, or Web.
Release The release of the product. If the desired service pack does not appear in the list, type the full name of the service pack in the box (for example, Service Pack 3).
Computer role The role of the computer. A computer that is running Windows has one of three roles:
  • Workstation: A domain-joined computer that is running any release of Windows® 7, Windows Vista®, or Windows XP.
  • Member Server: A domain-joined computer that is running any release of Windows Server® 2008 R2, Windows Server 2008, or Windows Server 2003.
  • Domain Controller: A computer running any release of Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 that hosts Active Directory® directory service for the domain.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Organizational Unit targeting

An Organizational Unit targeting item allows a preference item to be applied to computers or users only if the user or computer is a member of the organizational unit (OU) specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user or computer is a not member of the OU specified in the targeting item.

Option Description
Direct member only If this check box is selected, the targeting item returns true only if the user or computer is a direct member of the specified OU. If the user or computer inherited membership, the targeting item returns false.
User in OU If this option is clicked, the targeting item compares the specified OU to the OU of which the user is a member.

Note: This option is available only for preference items under User Configuration.
Computer in OU If this option is clicked, the targeting item compares the specified OU to the OU of which the computer is a member.

Note: You must choose either User in OU or Computer in OU.

Additional considerations

  • If a user or computer is not a member of an OU, but is a member of a security group that is a member of the OU, the user or computer is not a member of the OU.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

PCMCIA Present targeting

A PCMCIA Present targeting item allows a preference item to be applied to computers or users only if the processing computer has at least one PCMCIA slot present. If Is Not is selected, it allows the preference item to be applied only if the processing computer does not have any PCMCIA slots present.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • A PCMCIA slot is considered present when the drivers for the slot are installed and the slot is functioning correctly.

  • Preference items are available only in domain-based GPOs.

Portable Computer targeting

A Portable Computer targeting item allows a preference item to be applied to computers or users only if the processing computer is identified as a portable computer in the current hardware profile on the processing computer, or if the processing computer is identified as a portable computer with the docking state specified in the targeting item. When Is Not is selected, the targeting item allows the preference item to be applied only if the processing computer is not identified as a portable computer in the current hardware profile on the processing computer, or if the docking state of the processing computer differs from the docking state specified in the targeting item.

Additional considerations

  • Battery Present and PCMCIA Present targeting can also be useful for targeting portable computers.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Processing Mode targeting

A Processing Mode targeting item allows a preference item to be applied to computers or users only if the Group Policy processing mode or conditions on the processing computer match at least one of those specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the Group Policy processing mode or conditions on the processing computer do not match any of those specified in the targeting item.

Option Description
Synchronous If this check box is selected, the targeting item determines whether Group Policy is being processed synchronously. Synchronous processing ensures that Computer startup and User logon Group Policy processing complete before allowing the user to log on or showing the user's desktop, respectively.
Asynchronous If this check box is selected, the targeting item determines whether Group Policy is being processed asynchronously. Asynchronous processing allows the user to log on while computer Group Policy processes. Also, it allows the user's desktop to load (after logging on) while user Group Policy processes.
Background If this check box is selected, the targeting item determines whether Group Policy is being processed in the background. Background Group Policy processing, also known as "background refresh," occurs every 90 to 120 minutes to apply new Group Policy settings to the user or computer.
Processing conditions For any of the following check boxes that are selected, the targeting item determines whether that processing condition is in effect:
  • Forced refresh: The background refresh was forced.
  • Link transition: A change in link speed occurred between the current application and an earlier application of Group Policy.
  • No changes: No new Group Policy settings are applied to the computer or user.
  • RSoP transition: A change in RSoP logging occurred between the current application and an earlier application of Group Policy.
  • Slow link: Group Policy is applying over a slow network connection.
  • Safe boot: Windows is operating in safe mode.
  • Verbose logging: Verbose logging is enabled.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

RAM targeting

A RAM targeting item allows a preference item to be applied to computers or users only if the total amount of physical memory in the processing computer is greater than or equal to the amount specified in the targeting item (in megabytes). If Is Not is selected, it allows the preference item to be applied only if the total amount of physical memory in the processing computer is less than the amount specified in the targeting item.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Registry Match targeting

A Registry Match targeting item allows a preference item to be applied to computers or users only if the registry key or value specified in the targeting item exists, if the registry value contains the data specified in the targeting item, or if the version number in the registry value is within the range specified in the targeting item. If the targeting item allows the preference item and if Get value data is selected in the targeting item, then the targeting item saves the value data of the specified registry value to the environment variable specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the registry key or value specified in the targeting item does not exist, if the registry value does not contain the data specified in the targeting item, or if the version number in the registry value is not within the range specified in the targeting item.

Option Description
Key path The registry key to be matched, omitting the hive name.

Note: The Key Path box accepts preference processing variables. Press F3 to display a list of variables from which you can select.
Value name The value name to be matched. To specify the default value for the key, select the Default name check box.

Note: The Value name box accepts preference processing variables. Press F3 to display a list of variables from which you can select.

This option is available only if the match type is Value exists, Match value data, Decimal format, Substring match, Version match, or Get value data.
Value type The value type to be matched. To disregard the value type, select Any.

Note: This option is available only if the match type is Value exists, Match value data, Decimal format, Substring match, Version match, or Get value data.
Value data The value data to be matched.

Note: This option is available only if the match type is Match value data, Decimal format, or Substring match.
Variable name The name of the environment variable to which the registry value data is saved if the targeting item allows the preference item to be applied.

Note: This option is available only if the match type is Get value data.
Version range A version range to compare to the period-delimited or comma-delimited version string in the value data for the specified registry value. Each version segment must be greater than or equal to zero and less than or equal to 65535.

For example, to specify a version greater than or equal to 1.0 but less than 8.5.1, select >=, type 1 in the box on the left (replacing the first 0), select <, and replace the first three zeros in the box on the right with 8, 5, and 1.

Note: This option is available only if the match type is Version match.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Security Group targeting

A Security Group targeting item allows a preference item to be applied to computers or users only if the processing computer or user is a member of the group specified in the targeting item and optionally only if the specified group is the primary group for the processing computer or user. If Is Not is selected, it allows the preference item to be applied only if the processing computer or user is not a member of the group specified in the targeting item and optionally only if the specified group is not the primary group for the processing computer or user.

Option Description
Primary group If you select this check box, the targeting item processes the associated preference item only if the specified group is the primary group of the processing user.

Note: This option is disabled when Computer in group is selected.
User in group If selected, the target item processes the associated preference item when the processing user is a member of the group specified in Group.

Note: This option is disabled in computer preference items.
Computer in group If selected, the target item processes the associated preference item when the processing computer is a member of the group specified in Group.

Supported groups

Domain groups:

  • Global groups

  • Universal groups

Local groups:

  • Local groups (including built-in groups)

  • Domain local

  • Well-known

Additional considerations

  • Security Group targeting items use the group's security identifier to determine group membership and not the display name of the group.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

Site targeting

A Site targeting item allows a preference item to be applied to computers or users only if the processing computer is in the site in Active Directory specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing computer is not in the site in Active Directory specified in the targeting item.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.

  • Preference items are available only in domain-based GPOs.

Terminal Session targeting

A Terminal Session targeting item allows a preference item to be applied to users only if the processing user is logged on to a terminal session with the settings specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user is not logged on to a terminal session or the user is logged on to a terminal session without the settings specified in the targeting item.

Option Description
Parameter
  • Any: Targeting is not restricted by parameter.
  • Application name: The published name of the application.
  • Client name: The name of the computer from which the user is connecting to the terminal session.
  • Initial program: The path and name of the initial program.
  • Session name: The name of the terminal session used by the user. A typical Remote Desktop Services session name begins with "RDP_tpc" and is immediately followed by a numerical value.
  • Working directory: The working directory for the session, which is located on the server.
  • Client TCP/IP address: The address range of the client computer's TCP/IP address.

    Note: IPv6 addresses are not supported.
Parameter value The value required for the Parameter. If the Parameter is Any, this option is not available.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.

  • Preference items are available only in domain-based GPOs.

Time Range targeting

A Time Range targeting item allows a preference item to be applied to computers or users only if the current time on the end user's computer is within the time range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the current time on the end user's computer is not within the range specified in the targeting item.

Option Description
Time range The time range against which the current time is compared. If the time in the box on the left is later in the day than the time in the box on the right, then the time in the box on the right is considered to be during the next day.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.

User targeting

A User targeting item allows a preference item to be applied to users only if the processing user is the user specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing user is not the user specified in the targeting item.

Additional considerations

  • User targeting is available only for preference items under User Configuration.

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.

  • Preference items are available only in domain-based GPOs.

WMI Query targeting

A WMI Query targeting item allows a preference item to be applied to computers or users only if the processing computer evaluates the WMI query as true. If Is Not is selected, it allows the preference item to be applied only if the processing computer evaluates the WMI query as false.

Option Description
Query The WMI query text

Example:
The targeting item allows the associated preference item to process if the computer's time zone is set to the Eastern Time zone.
Select * from win32_timezone where bias = -300
Namespace The WMI namespace in which to execute the query. The default value is Root\cimv2.
Property The name of a specific property to assign to a variable. Providing this value in the targeting item is optional.
Variable name The name of the environment variable to which the targeting item sets the value of the Property, if one is found. Providing this value in the targeting item is optional.

Additional considerations

  • To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.

  • Preference items are available only in domain-based GPOs.