TestimoX

API Reference

Class

WmiFilterService

Namespace ADPlayground.Gpo
Assembly ADPlayground
Modifiers static

Provides operations for managing GPO WMI filters.

Inheritance

  • Object
  • WmiFilterService

Methods

CreateFilter 2 overloads
public static GpoWmiFilter CreateFilter(String name, IEnumerable<WmiFilterQuery> queries, String description = null, String domainName = null) #
Returns: GpoWmiFilter

Creates a WMI filter in the specified or current domain.

Parameters

name System.String requiredposition: 0
query System.String requiredposition: 1
description System.String = null optionalposition: 2
domainName System.String = null optionalposition: 3
CreateFilter(System.String name, System.Collections.Generic.IEnumerable{ADPlayground.Gpo.WmiFilterQuery} queries, System.String description, System.String domainName) #

Creates a WMI filter with multiple queries in the specified or current domain.

Parameters

name System.String required
queries System.Collections.Generic.IEnumerable{ADPlayground.Gpo.WmiFilterQuery} required
description System.String required
domainName System.String required
CreateFilterAsync 2 overloads
public static Task<GpoWmiFilter> CreateFilterAsync(String name, IEnumerable<WmiFilterQuery> queries, String description = null, String domainName = null) #
Returns: Task<GpoWmiFilter>

Asynchronously creates a WMI filter.

Parameters

name System.String requiredposition: 0
query System.String requiredposition: 1
description System.String = null optionalposition: 2
domainName System.String = null optionalposition: 3
CreateFilterAsync(System.String name, System.Collections.Generic.IEnumerable{ADPlayground.Gpo.WmiFilterQuery} queries, System.String description, System.String domainName) #

Asynchronously creates a WMI filter with multiple queries.

Parameters

name System.String required
queries System.Collections.Generic.IEnumerable{ADPlayground.Gpo.WmiFilterQuery} required
description System.String required
domainName System.String required
public static IEnumerable<GpoWmiFilter> EnumerateFilters(String domainName = null, CancellationToken cancellationToken = null) #
Returns: IEnumerable<GpoWmiFilter>

Enumerates WMI filters in the specified domain or current domain when domainName is null.

Parameters

domainName System.String = null optionalposition: 0
cancellationToken System.Threading.CancellationToken = null optionalposition: 1
public static Task<IEnumerable<GpoWmiFilter>> EnumerateFiltersAsync(String domainName = null, CancellationToken cancellationToken = null) #
Returns: Task<IEnumerable<GpoWmiFilter>>

Asynchronously enumerates WMI filters in the specified domain or current domain when domainName is null.

Parameters

domainName System.String = null optionalposition: 0
cancellationToken System.Threading.CancellationToken = null optionalposition: 1
public static GpoWmiFilter GetFilterByDistinguishedName(String filterDn, String domainName) #
Returns: GpoWmiFilter

Retrieves a WMI filter by its distinguished name.

Parameters

filterDn System.String requiredposition: 0
domainName System.String requiredposition: 1
public static GpoWmiFilter GetFilterByName(String displayName, String domainName) #
Returns: GpoWmiFilter

Retrieves a WMI filter by its display name.

Parameters

displayName System.String requiredposition: 0
domainName System.String requiredposition: 1
public static Boolean LinkFilterToGpo(Guid filterId, Guid gpoId, String domainName = null) #
Returns: Boolean

Links a WMI filter to a GPO.

Parameters

filterId System.Guid requiredposition: 0
gpoId System.Guid requiredposition: 1
domainName System.String = null optionalposition: 2
public static Task<Boolean> LinkFilterToGpoAsync(Guid filterId, Guid gpoId, String domainName = null) #
Returns: Task<Boolean>

Asynchronously links a WMI filter to a GPO.

Parameters

filterId System.Guid requiredposition: 0
gpoId System.Guid requiredposition: 1
domainName System.String = null optionalposition: 2
RemoveFilter 2 overloads
public static Boolean RemoveFilter(String displayName, String domainName) #
Returns: Boolean

Removes a WMI filter by its display name.

Parameters

displayName System.String requiredposition: 0
domainName System.String requiredposition: 1
public static Boolean RemoveFilter(Guid id, String domainName = null) #
Returns: Boolean

Removes the WMI filter with the specified identifier.

Parameters

id System.Guid requiredposition: 0
domainName System.String = null optionalposition: 1
public static Task<Boolean> RemoveFilterAsync(Guid id, String domainName = null) #
Returns: Task<Boolean>

Asynchronously removes the WMI filter with the specified identifier.

Parameters

id System.Guid requiredposition: 0
domainName System.String = null optionalposition: 1
public static Boolean TryExtractFilterDn(String linkValue, out String filterDn) #
Returns: Boolean

Extracts the WMI filter distinguishedName (DN) from a gPCWQLFilter/gPCWMIFilter link value. Supported formats: - "LDAP://host/<DN>;domain" - "<DN>;domain" - "<DN>" - Legacy gPCWMIFilter: "[domain];{GUID};rev" or "[domain;{GUID};rev]"

Parameters

linkValue System.String requiredposition: 0
filterDn System.String@ requiredposition: 1
public static GpoWmiFilter UpdateFilter(String displayName, IEnumerable<WmiFilterQuery> queries, String description = null, String domainName = null) #
Returns: GpoWmiFilter

Updates a WMI filter by its display name.

Parameters

displayName System.String requiredposition: 0
queries System.Collections.Generic.IEnumerable{ADPlayground.Gpo.WmiFilterQuery} requiredposition: 1
description System.String = null optionalposition: 2
domainName System.String = null optionalposition: 3
public static Boolean ValidateNamespace(String wmiNamespace) #
Returns: Boolean

Validates that a WMI namespace follows expected format.

Parameters

wmiNamespace System.String requiredposition: 0
public static Boolean ValidateQuery(WmiFilterQuery query) #
Returns: Boolean

Validates that a WMI query uses basic WQL syntax.

Parameters

query ADPlayground.Gpo.WmiFilterQuery requiredposition: 0
public static Task<Boolean> ValidateQueryAsync(WmiFilterQuery query) #
Returns: Task<Boolean>

Asynchronously validates that a WMI query uses basic WQL syntax.

Parameters

query ADPlayground.Gpo.WmiFilterQuery requiredposition: 0

Fields

public const String DefaultNamespace #

Default WMI namespace used when none is specified in existing filters.

Value: root\CIMv2