Describe the difference between Group Policy Security Filtering and WMI Filtering.

Describe the difference between Group Policy Security Filtering and WMI Filtering.

• A. Security Filtering restricts GPO application by security groups; WMI Filtering uses queries to apply GPOs based on computer attributes
• B. Security Filtering uses WMI queries; WMI Filtering uses security groups
• C. Security Filtering and WMI Filtering are the same
• D. Security Filtering applies to users only

Answer: (A)

Security filtering and WMI filtering control when a GPO applies, but they do so in different ways. Security filtering narrows who the GPO can affect by using security group membership; only members of the specified groups (and the appropriate permissions) will have the GPO applied, regardless of other factors. WMI filtering attaches a WMI query to the GPO and evaluates it on the target computer during policy processing; the GPO applies only if the query conditions about the computer’s attributes (like OS version, hardware features, or other WMI-reported data) are true. Both can be used together, but they operate on different dimensions—group-based security vs. computer-attribute conditions. The described option is the best because it accurately captures that security filtering relies on security groups, while WMI filtering uses queries on computer attributes to determine applicability.

Security filtering and WMI filtering control when a GPO applies, but they do so in different ways. Security filtering narrows who the GPO can affect by using security group membership; only members of the specified groups (and the appropriate permissions) will have the GPO applied, regardless of other factors. WMI filtering attaches a WMI query to the GPO and evaluates it on the target computer during policy processing; the GPO applies only if the query conditions about the computer’s attributes (like OS version, hardware features, or other WMI-reported data) are true. Both can be used together, but they operate on different dimensions—group-based security vs. computer-attribute conditions. The described option is the best because it accurately captures that security filtering relies on security groups, while WMI filtering uses queries on computer attributes to determine applicability.