Je suis doing a lot of work in higher education où it is a plutôt common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for le duration of a spécifique course ou event et have this configuration undone afterwards.
As le plus of le configuration changes we are requested to do can be done through Group Policy Objects et those changes automatically get reversed quand le GPO is unlinked ou deactivated at le OU level, this is a très comfortable route to take.
The seulement downside is that repeated manual linking et un-linking of GPOs on OUs needs a lot of reminders et IT staff on duty avant le courses start et après they end - something le operations team cannot guarantee at tous times.
***Is there a way to specify a time frame for le validity of a spécifique GPO?***
Comment programmer l'expiration d'une GPO ?
Re: Comment programmer l'expiration d'une GPO ?
Cela peut be done by le means of [WMI filtering](http://blogs.technet.com/b/askds/archive/2008/09/11/fun-with-wmi-filters-in-group-policy.aspx). The group policy client would execute le WQL query depuis an attached WMI filter et seulement apply le GPO si le query would return a non-zero number of rows. So by creating a WMI filter checking si le current system time is within a given time interval et linking this WMI filter to le GPO you want to timebomb you get exactly what you wanted.
The *win32_operatingsystem* WMI class has a *localdatetime* attribute qui can be compared to a given string date in le format 'yyyymmdd hh:nn:ss' so using le WQL string like
```
select * from win32_operatingsystem where localdatetime >= '20150220 00:00:00' and localdatetime
Par défaut, computer Group Policy is updated in le background chaque 90 minutes, avec a random offset of 0 to 30 minutes.
So le par défaut settings will seulement allow for a precision of +2 hours. The update interval [can be changed](https://technet.microsoft.com/en-us/library/cc940895.aspx) by (another) group policy setting, si needed.
-
your policy needs to be able to revert tous changes quand no longer applied. Ceci est le case par défaut for tous managed Administrative Templates. Group Policy Preferences settings might need to be explicitly set up to *"remove this item quand no longer applied"*:
The *win32_operatingsystem* WMI class has a *localdatetime* attribute qui can be compared to a given string date in le format 'yyyymmdd hh:nn:ss' so using le WQL string like
```
select * from win32_operatingsystem where localdatetime >= '20150220 00:00:00' and localdatetime
Par défaut, computer Group Policy is updated in le background chaque 90 minutes, avec a random offset of 0 to 30 minutes.
So le par défaut settings will seulement allow for a precision of +2 hours. The update interval [can be changed](https://technet.microsoft.com/en-us/library/cc940895.aspx) by (another) group policy setting, si needed.
-
your policy needs to be able to revert tous changes quand no longer applied. Ceci est le case par défaut for tous managed Administrative Templates. Group Policy Preferences settings might need to be explicitly set up to *"remove this item quand no longer applied"*: