Today, I had an interesting situation with GPO, where I finally found a use for GPO WMI filters that shows the real use for them.  A colleague approached me, saying that he had a complaint from a teacher that the students have discovered how to do the ctrl-alt-up/down, to flip the screen display upside down. For whatever reason, that setting was even sticking through a reboot with DeepFreeze on.

So in researching the issue, our particular situation was a result of having the Intel utility loaded with the Intel graphics cards. So, here’s how to get this taken care of.

The first thing to do is to create a WMI filter in GPO to make sure that the policy we apply will not make changes to computers which do not have the Intel Graphics cards. To do this, I used the WMI Explorer and found the corresponding Class: CIM_PCVideoController.

WMI Query for Intel GraphicsWMI Query for Intel Graphics

WMI Query for Intel Graphics

Now that we have the WMI query, we’ll create WMI Filter on the GPO. To do this, navigate to your GPMC -> Domains -> -> WMI Filters and create a new WMI Filter. Now create a new filter rule, and paste the query that will find the video card in question. In this case, it was the Intel Card.

 

Create WMI Filter

Create WMI Filter

The only thing left now is to create the actual policy with the registry keys needed:

The first one is basically deleting the start item that starts up the intel graphics utility:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run –> IgfxTray

The second one is a system registry setting that disables the ability to rotate the screen:
HKLM\SYSTEM\CurrentControlSet\Services\ialm\Device0\Display1_EnableRotation –>  REG_BINARY: 00

These registry entries need to be entered as a Group Policy Preference. The easiest way to do this is to use the registry wizard, and connect to a machine that contains these registry settings. This is what the policy settings will look like:

Policy and Registry

Create the policy, attach the WMI filter, and create the registry preference

 

 

Now just associate the policy with an OU, and don’t forget to associate the WMI filter with your policy,

Associate WMI Filter

Associate the WMI filter with the policy

 

 

 

 

 

 

Hopefully you found this walk through useful. I did not go into too much details regarding the specific steps, but if you need to know anything in addition to what is here, please feel free to ask in the commends, and I’ll do my best to respond.

 

 

 

 

 

 

Print Friendly, PDF & Email
Subscribe By Email for Updates.