- Click New Item, click a type of targeting item to apply to the preference item, and then configure settings for the targeting item.
Note To change the value of the targeting item to its opposite, on the Item Options menu, click Is Not. Text fields accept preference processing variables. Press F3 to display a list of variables from which you can select. To provide a custom name for the targeting item, on the Item Options menu, click Label, and type a Name. To provide a comment for a targeting item, on the Item Options menu, click Label, and type a Comment.
Note To create a parenthetical expression, click Add Collection. (For more information, see Targeting Collection.)
Targeting collection
The targeting items applied to a preference item are evaluated as a logical expression. A targeting collection allows you create a parenthetical grouping within that expression. You can nest one targeting collection within another to create more complex logical expressions.
A targeting collection allows a preference item to be applied to computers or users only if the collection of targeting items specified results in a value of true. If Is Not is selected, it allows the preference item to be applied only if the collection of targeting items specified results in a value of false.
- If you want to restrict the scope of multiple preference items with a complex set of targeting items, you can simplify configuration by using an environment variable. For example, create an Environment Variable preference item that generates a new environment variable with a value of 1, and apply the targeting items to it. To apply the same targeting to other preference items, add an Environment Variable targeting item to those preference items, and configure it to require a value of 1 for the variable that you created using an Environment Variable preference item.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Battery Present targeting
A Battery Present targeting item allows a preference item to be applied to computers or users only if one or more batteries are present in the processing computer. If Is Not is selected, it allows the preference item to be applied only if the processing computer does not have one or more batteries present.
Additional considerations
- If an uninterruptible power supply (UPS) is connected to the processing computer, a Battery Present targeting item may detect the UPS and identify it as a battery.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- This targeting item can be useful for portable computer detection.
- Preference items are available only in domain-based GPOs.
Computer Name targeting
A Computer Name targeting item allows a preference item to be applied to computers or users only if the computer's name matches the specified computer name in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the computer's name does not match the specified computer name in the targeting item.
| Option | Description |
|---|---|
| NetBIOS | If this option is clicked, the targeting item compares the specified name to the NetBIOS name of the computer (as specified in the %ComputerName% variable). |
| DNS | If this option is clicked, the targeting item resolves the specified name into one or more IP addresses using the Windows name resolution behavior in effect on the computer. The targeting item then compares the list of IP addresses obtained to all IP addresses bound to all network adapters on the computer. If a single match exists, the targeting item returns a value of true. Note: You must choose either NetBIOS or DNS. There is no required format for the computer name except that it must be resolvable to an IP address. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.
- Preference items are available only in domain-based GPOs.
CPU Speed (MHz) targeting
A CPU Speed targeting item allows a preference item to be applied to computers or users only if the processing computer's CPU speed is greater than or equal to the value specified in the targeting item (in megahertz, or MHz). If Is Not is selected, it allows the preference item to be applied only if the processing computer's CPU speed is less than or equal to the value specified in the targeting item.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Date match targeting
A Date Match targeting item allows a preference item to be applied to computers or users only if the day or date matches that specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the day or date does not match that specified in the targeting item.
| Option | Description |
|---|---|
| Weekly | If you select this option, the preference item is applied only on the day of the week that you specify in the targeting item. |
| Monthly | If you select this option, the preference item is applied only on the day that you specify in the targeting item. |
| On date | If you select this option, the preference item is applied only on the date that you specify in the targeting item. If you select Every year, the preference item is applied each year only on the month and day that you specify. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Disk Space targeting
A Disk Space targeting item allows a preference item to be applied to computers or users only if the processing computer's available disk space is greater than or equal to the amount of free space specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing computer's available disk space is less than or equal to the amount of free space specified in the targeting item.
| Option | Description |
|---|---|
| Drive letter | Either the system drive or a specific drive letter. The system drive option directs the targeting item to use the SYSTEMDRIVE environment variable to determine the drive letter. The specified drive letter may be a mapped network drive. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Domain targeting
A Domain targeting item allows a preference item to be applied to computers or users only if the user is logged on to or the computer is a member of the domain specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user is not logged on to or the computer is not a member of the domain specified in the targeting item.
| Option | Description |
|---|---|
| User logged on to domain | If this option is clicked, the targeting item compares the specified domain name to the domain to which the end user is logged on. This is also the domain of which the end user is a member and uses the %LogonDomain% variable for comparison. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.
- Preference items are available only in domain-based GPOs.
Environment Variable targeting
An Environment Variable targeting item allows a preference item to be applied to computers or users only if the environment variable name and value specified in the targeting item are equal. If Is Not is selected, it allows the preference item to be applied only if the environment variable name and value specified in the targeting item are not equal or if the environment variable does not exist.
| Option | Description |
|---|---|
| Value | The value to compare to the specified environment variable. |
Additional considerations
- If you want to restrict the scope of multiple preference items with a complex set of targeting items, you can simplify configuration by using an environment variable. For example, create an Environment Variable preference item that generates a new environment variable with a value of 1, and apply the targeting items to it. To apply the same targeting to other preference items, add an Environment Variable targeting item to those preference items, and configure it to require a value of 1 for the variable that you created using an Environment Variable preference item.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
File Match targeting
A File Match targeting item allows a preference item to be applied to computers or users only if the file or folder specified in the targeting item exists, or only if the file exists and is a version within the range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the file or folder specified in the targeting item does not exist, or only if the version of the file is not within the range specified in the targeting item.
| Option | Description |
|---|---|
| Version range | If you select Match file version, enter a version range to match. Each version segment must be greater than or equal to zero and less than or equal to 65535. |
For example, to specify a version greater than or equal to 1.0 but less than 8.5.1, select >=, type 1 in the box on the left (replacing the first 0), select , and replace the first three zeros in the box on the right with 8, 5, and 1.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
IP Address Range targeting
An IP Address Range targeting item allows a preference item to be applied to computers or users only if the processing computer's IP address is within the range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing computer's IP address is not within the range specified in the targeting item.
| Option | Description |
|---|---|
| IP address range | The range against which the processing computer's IP address is compared. Range starting points and ending points are inclusive. You can specify a single address by typing the same value in both boxes. |
Additional considerations
- IPv6 addresses are not supported.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Language targeting
A Language targeting item allows a preference item to be applied to computers or users only if the locale specified in the targeting item is installed on the processing computer. Additional options allow you to restrict the targeting to the user's or computer's locale. If Is Not is selected, it allows the preference item to be applied only if the processing computer's locale does not match the specified locale in the targeting item.
A locale is composed of a language and, in some cases, a geographic area in which the language is spoken or the alphabet used. For example, French (Canada) is a locale composed of the language French and the geographic area Canada.
| Option | Description |
|---|---|
| User | If you select this check box, you restrict the targeting of the item to include the user's locale. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
LDAP Query targeting
An LDAP Query targeting item allows a preference item to be applied to computers or users only if the LDAP query returns a value for the attribute specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the LDAP query does not return a value for the attribute specified in the targeting item.
- This example binds to the root of the namespace.
LDAP: - This example binds to the root of the Global Catalog.
GC: - This example binds to a specific server.
LDAP://servername - This example binds to a specific container by its distinguished name.
LDAP://CN=LabUser1,OU=LAB,DC=contoso,DC=com
| Option | Description |
|---|---|
| Attribute | The specified attribute value returned from the search. Providing this value in the targeting item is optional. |
- ADSTYPE_DN_STRING
- ADSTYPE_CASE_EXACT_STRING
- ADSTYPE_CASE_IGNORE_STRING
- ADSTYPE_PRINTABLE_STRING
- ADSTYPE_NUMERIC_STRING
- ADSTYPE_OBJECT_CLASS
- ADSTYPE_BOOLEAN
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
- LDAP Query targeting items use the subtree search option.
- LDAP Query targeting items do not chase referrals.
MAC Address Range targeting
A MAC Address Range targeting item allows a preference item to be applied to computers or users only if any of the processing computer's MAC addresses are within the range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if none of the processing computer's MAC addresses are within the range specified in the targeting item.
| Option | Description |
|---|---|
| MAC address range | The range against which the processing computer's MAC addresses are compared. Range starting points and ending points are inclusive. You can specify a single address by typing the same value in both boxes. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
MSI Query targeting
A Microsoft® Windows® Installer Query targeting item allows a preference item to be applied to computers or users only if certain aspects of a product, update, or component installed by Windows Installer on the processing computer match the specified criteria in the targeting item. If Is Not is selected, it allows the preference item to be applied only if certain aspects of a product, update, or component installed by Windows Installer on the processing computer do not match the specified criteria in the targeting item.
| Option | Description |
|---|---|
| Target type | Defines the target of the Windows Installer query as an installed product, an installed update, or a component. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Network Connection targeting
A Network Connection targeting item allows a preference item to be applied to users only if a network connection of the type specified in the targeting item is connected. If Is Not is selected, it allows the preference item to be applied only if no network connection of the type specified in the targeting item is connected.
Network Connection targeting items detect whether a type of network connection exists, not whether the user is logged on through a connection of that type.
- Any (includes only those network connection types listed below)
- Telephone modem accessed through a COM port
- ISDN card with corresponding NDISWAN driver installed
- X.25 card with corresponding NDISWAN driver installed
- Virtual Private Network (VPN)
- Asynchronous Transfer Mode (ATM)
- Frame Relay
- Sonet
- Switched 56K access
- Infrared Data Association (IrDA) device
- Serial Port direct connection
- Parallel Port direct connection
- Generic
- Packet Assembler/Disassembler
- PPP over Ethernet (PPPoE)
Additional considerations
- Network Connection targeting is available only for preference items under User Configuration.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Operating System targeting
An Operating System targeting item allows a preference item to be applied to computers or users only if the processing computer's operating system's product name, release, edition, or computer role matches those specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the operating system's product name, release, edition, or computer role does not match those specified in the targeting item.
- Workstation: A domain-joined computer that is running any release of Windows® 7, Windows Vista®, or Windows XP.
- Member Server: A domain-joined computer that is running any release of Windows Server® 2008 R2, Windows Server 2008, or Windows Server 2003.
- Domain Controller: A computer running any release of Windows Server 2008 R2, Windows Server 2008, or Windows Server 2003 that hosts Active Directory® directory service for the domain.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Organizational Unit targeting
An Organizational Unit targeting item allows a preference item to be applied to computers or users only if the user or computer is a member of the organizational unit (OU) specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user or computer is a not member of the OU specified in the targeting item.
| Option | Description |
|---|---|
| Direct member only | If this check box is selected, the targeting item returns true only if the user or computer is a direct member of the specified OU. If the user or computer inherited membership, the targeting item returns false. |
| User in OU | If this option is clicked, the targeting item compares the specified OU to the OU of which the user is a member. |
Additional considerations
- If a user or computer is not a member of an OU, but is a member of a security group that is a member of the OU, the user or computer is not a member of the OU.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
PCMCIA Present targeting
A PCMCIA Present targeting item allows a preference item to be applied to computers or users only if the processing computer has at least one PCMCIA slot present. If Is Not is selected, it allows the preference item to be applied only if the processing computer does not have any PCMCIA slots present.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- A PCMCIA slot is considered present when the drivers for the slot are installed and the slot is functioning correctly.
- Preference items are available only in domain-based GPOs.
Portable Computer targeting
A Portable Computer targeting item allows a preference item to be applied to computers or users only if the processing computer is identified as a portable computer in the current hardware profile on the processing computer, or if the processing computer is identified as a portable computer with the docking state specified in the targeting item. When Is Not is selected, the targeting item allows the preference item to be applied only if the processing computer is not identified as a portable computer in the current hardware profile on the processing computer, or if the docking state of the processing computer differs from the docking state specified in the targeting item.
Additional considerations
- Battery Present and PCMCIA Present targeting can also be useful for targeting portable computers.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Processing Mode targeting
A Processing Mode targeting item allows a preference item to be applied to computers or users only if the Group Policy processing mode or conditions on the processing computer match at least one of those specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the Group Policy processing mode or conditions on the processing computer do not match any of those specified in the targeting item.
- Forced refresh: The background refresh was forced.
- Link transition: A change in link speed occurred between the current application and an earlier application of Group Policy.
- No changes: No new Group Policy settings are applied to the computer or user.
- RSoP transition: A change in RSoP logging occurred between the current application and an earlier application of Group Policy.
- Slow link: Group Policy is applying over a slow network connection.
- Safe boot: Windows is operating in safe mode.
- Verbose logging: Verbose logging is enabled.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
RAM targeting
A RAM targeting item allows a preference item to be applied to computers or users only if the total amount of physical memory in the processing computer is greater than or equal to the amount specified in the targeting item (in megabytes). If Is Not is selected, it allows the preference item to be applied only if the total amount of physical memory in the processing computer is less than the amount specified in the targeting item.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Registry Match targeting
A Registry Match targeting item allows a preference item to be applied to computers or users only if the registry key or value specified in the targeting item exists, if the registry value contains the data specified in the targeting item, or if the version number in the registry value is within the range specified in the targeting item. If the targeting item allows the preference item and if Get value data is selected in the targeting item, then the targeting item saves the value data of the specified registry value to the environment variable specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the registry key or value specified in the targeting item does not exist, if the registry value does not contain the data specified in the targeting item, or if the version number in the registry value is not within the range specified in the targeting item.
| Option | Description |
|---|---|
| Key path | The registry key to be matched, omitting the hive name. |
Note: The Value name box accepts preference processing variables. Press F3 to display a list of variables from which you can select.
For example, to specify a version greater than or equal to 1.0 but less than 8.5.1, select >=, type 1 in the box on the left (replacing the first 0), select , and replace the first three zeros in the box on the right with 8, 5, and 1.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Security Group targeting
A Security Group targeting item allows a preference item to be applied to computers or users only if the processing computer or user is a member of the group specified in the targeting item and optionally only if the specified group is the primary group for the processing computer or user. If Is Not is selected, it allows the preference item to be applied only if the processing computer or user is not a member of the group specified in the targeting item and optionally only if the specified group is not the primary group for the processing computer or user.
| Option | Description |
|---|---|
| Primary group | If you select this check box, the targeting item processes the associated preference item only if the specified group is the primary group of the processing user. |
Supported groups
- Global groups
- Universal groups
- Local groups (including built-in groups)
- Domain local
- Well-known
Additional considerations
- Security Group targeting items use the group's security identifier to determine group membership and not the display name of the group.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
Site targeting
A Site targeting item allows a preference item to be applied to computers or users only if the processing computer is in the site in Active Directory specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing computer is not in the site in Active Directory specified in the targeting item.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.
- Preference items are available only in domain-based GPOs.
Terminal Session targeting
A Terminal Session targeting item allows a preference item to be applied to users only if the processing user is logged on to a terminal session with the settings specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the user is not logged on to a terminal session or the user is logged on to a terminal session without the settings specified in the targeting item.
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.
- Preference items are available only in domain-based GPOs.
Time Range targeting
A Time Range targeting item allows a preference item to be applied to computers or users only if the current time on the end user's computer is within the time range specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the current time on the end user's computer is not within the range specified in the targeting item.
| Option | Description |
|---|---|
| Time range | The time range against which the current time is compared. If the time in the box on the left is later in the day than the time in the box on the right, then the time in the box on the right is considered to be during the next day. |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
User targeting
A User targeting item allows a preference item to be applied to users only if the processing user is the user specified in the targeting item. If Is Not is selected, it allows the preference item to be applied only if the processing user is not the user specified in the targeting item.
Additional considerations
- User targeting is available only for preference items under User Configuration.
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Boxes in Computer Name (NetBIOS only), Domain, Site, Terminal Session, and User (if not matched by SID) targeting items accept single character (?) and multiple character (*) wildcards.
- Preference items are available only in domain-based GPOs.
WMI Query targeting
A WMI Query targeting item allows a preference item to be applied to computers or users only if the processing computer evaluates the WMI query as true. If Is Not is selected, it allows the preference item to be applied only if the processing computer evaluates the WMI query as false.
| Option | Description |
|---|---|
| Query | The WMI query text |
Additional considerations
- To reposition a targeting item within the list of targeting items that you have applied to a preference item, either drag the targeting item to a new position, or select the targeting item and then click the Move Up arrow or Move Down arrow.
- Preference items are available only in domain-based GPOs.
