WMI (Windows Management information) Filters

A WMI filter specifies if a Workstyle should be applied, based on the outcome of a WMI query.

The filter allows you to specify the following:

  • Description: Free text to describe the WMI query.
  • Namespace: Set the namespace that the query executes against. By default, this is root\CIMV2.
  • Query: The WMI Query Language (WQL) statement to execute.
  • Timeout: The time (in seconds) the client waits for a response before terminating the query. By default, no timeout is specified.

Long running WMI queries result in delayed application launches. Therefore, we recommend a timeout be specified to ensure that queries are terminated in a timely manner.

When you execute a WMI query, the client checks if any rows of data are returned. If any data is returned, then the WMI query is successful. If no data is returned or an error is detected in the execution, the WMI query is unsuccessful.

It is possible for a WMI query to return many rows of data, in which case you can create more complex WQL statements using WHERE clauses. The more clauses you add to your statement, the fewer rows are likely to return, and the more specific your WMI query will be.

The WMI filter includes several default templates for common WMI queries. To add a new WMI query from a template, click Add a WMI template and use the instant search box to quickly find a template.

WQL statements can include parameterized values, which allow you to execute queries including select user, computer, and Endpoint Privilege Management for Windows properties.

WMI queries are always run as SYSTEM, and cannot be executed against remote computers or network resources. WMI filters do not support impersonation levels, and can only be used with SELECT queries.

By default, a WMI filter applies if any of the WMI queries in the list return true. If you specified multiple WMI queries, and want to apply the Workstyle only if ALL queries return true, then check the option All items below should match.

If a WMI filter is added, but no WMI queries are specified, a warning is displayed advising No queries added and the WMI filter is ignored.

For more information on how to use parameters, see Windows QuickStart Policy Summary.