Powershell
WMI Filters as Code The Silent Half of Group Policy
WMI filters live in their own LDAP container with a hand-encoded `msWMI-Parm2` blob, no shipped cmdlets, and a habit of silently dropping GPO scope when malformed. This post automates them with the same Get/Test/Set discipline the rest of the series uses.


