OK. Thanks. Not sure. The need has gone away. We have several do not touch machines (this example and others) and we are going to just put them in OU that is basically "LD stay away" OU. Then we can move machines in and out as needed and not have to redefine scope when we have a change. Much more elegant than this awkward query.
↧