[{"id":78,"title":"GPO \u00d6\u011fe D\u00fczeyi Hedefleme (Item-Level Targeting)","content":"Group Policy (GPO) y\u00f6netimi s\u0131ras\u0131nda, politikalar\u0131n <strong>belirli donan\u0131m veya yaz\u0131l\u0131m \u00f6zelliklerine sahip cihazlara <\/strong>uygulanmas\u0131n\u0131 sa\u011flamak i\u00e7in <strong>\u00d6\u011fe D\u00fczeyi Hedefleme (Item-Level Targeting) <\/strong>kullan\u0131l\u0131r. Ancak bu \u00f6zellik, <strong>\"Bilgisayar Ad\u0131 Hedefleme\" (Computer Name Targeting) <\/strong>gibi statik tan\u0131mlamalar\u0131 do\u011frudan desteklemez. Bu yaz\u0131da, neden baz\u0131 hedefleme se\u00e7enekleri (\u00f6rne\u011fin, pil varl\u0131\u011f\u0131, DVD s\u00fcr\u00fcc\u00fcs\u00fc) mevcutken, \"Bilgisayar Ad\u0131\" gibi bir se\u00e7ene\u011fin yer almad\u0131\u011f\u0131n\u0131 ve bu ihtiyac\u0131n nas\u0131l kar\u015f\u0131lanabilece\u011fini a\u00e7\u0131klayaca\u011f\u0131m. <h3><strong>\u00d6\u011fe D\u00fczeyi Hedefleme Nedir?<\/strong><\/h3> \u00d6\u011fe D\u00fczeyi Hedefleme, <strong>GPO i\u00e7eri\u011findeki belirli ayarlar\u0131n <\/strong>(\u00f6rne\u011fin, dosya payla\u015f\u0131m\u0131, yaz\u0131l\u0131m da\u011f\u0131t\u0131m\u0131) <strong>dinamik olarak hedeflenmesini <\/strong>sa\u011flar. Bu hedefleme, cihaz\u0131n donan\u0131m\/sofware \u00f6zelliklerine g\u00f6re yap\u0131l\u0131r. \u00d6rnekler: <div ><\/div> <ul> <li data-spm-anchor-><strong>Pil Varl\u0131\u011f\u0131 (Battery Present): <\/strong>Laptop'lara \u00f6zel politikalar.<\/li> <li><strong>DVD Varl\u0131\u011f\u0131 (DVD Present): <\/strong>DVD s\u00fcr\u00fcc\u00fcs\u00fc olan cihazlara \u00f6zel ayarlar.<\/li> <li><strong>CPU H\u0131z\u0131 (CPU Speed): <\/strong>Belirli i\u015flemci h\u0131z\u0131na sahip makineler i\u00e7in yap\u0131land\u0131rmalar.<\/li> <\/ul> <div ><\/div> <p data-spm-anchor->Bu hedefleme, <strong>ko\u015fullu mant\u0131k (WMI sorgular\u0131 veya registry anahtarlar\u0131) <\/strong>ile \u00e7al\u0131\u015f\u0131r ve <strong>cihaz\u0131n durumuna g\u00f6re dinamik olarak uygulan\u0131r <\/strong>.<\/p> <h3 data-spm-anchor-><strong data-spm-anchor->Bilgisayar Ad\u0131 Hedefleme<\/strong><\/h3> \"\u00d6\u011fe D\u00fczeyi Hedefleme\" \u00f6zellikleri, <strong>dinamik ve sistem tabanl\u0131 ko\u015fullara <\/strong>odaklan\u0131r. \"Bilgisayar Ad\u0131\" gibi statik tan\u0131mlamalar ise bu yap\u0131ya uymaz. A\u015fa\u011f\u0131daki nedenlerle bu se\u00e7enek yer almaz: <h4 data-spm-anchor-><strong data-spm-anchor-> Statik Tan\u0131mlamalar Dinamiklik Sa\u011flamaz<\/strong><\/h4> <ul> <li>Bilgisayar adlar\u0131 (\u00f6rne\u011fin, <code >PC001<\/code>, <code >LAPTOP-XYZ<\/code>) genellikle sabittir ve cihaz\u0131n donan\u0131m\/sofware durumuyla ili\u015fkili de\u011fildir.<\/li> <li>\u00d6\u011fe D\u00fczeyi Hedefleme, <strong>cihaz\u0131n mevcut \u00f6zelliklerine g\u00f6re karar verir <\/strong>(\u00f6rne\u011fin, pil varsa, CPU h\u0131z\u0131 X'ten b\u00fcy\u00fckse).<\/li> <\/ul> <h4><strong data-spm-anchor->G\u00fcvenlik Filtreleme ve WMI ile Alternatif Y\u00f6ntemler Mevcut<\/strong><\/h4> <ul> <li><strong data-spm-anchor->GPO G\u00fcvenlik Filtreleme (Security Filtering): <\/strong>Belirli bilgisayarlar\u0131n GPO'yu almas\u0131n\u0131 sa\u011flamak i\u00e7in do\u011frudan g\u00fcvenlik gruplar\u0131na atama yap\u0131labilir.<\/li> <li><strong>WMI Sorgular\u0131: <\/strong>Dinamik olarak bilgisayar ad\u0131n\u0131 hedefleyen sorgular yaz\u0131labilir. <ul> <li>\u00f6rnek : SELECT * FROM Win32_ComputerSystem WHERE Name = \"PC001\"<\/li> <\/ul> <\/li> <\/ul> <h4><strong data-spm-anchor->OU (Organizasyon Birimi) Kullan\u0131m\u0131 Daha Uygun<\/strong><\/h4> <ul> <li data-spm-anchor->Bilgisayarlar\u0131 adlar\u0131na g\u00f6re de\u011fil, <strong>mant\u0131ksal gruplar (OU) <\/strong>halinde organize etmek, y\u00f6netim kolayl\u0131\u011f\u0131 sa\u011flar.<\/li> <li>\u00d6rne\u011fin, t\u00fcm sat\u0131\u015f departman\u0131 bilgisayarlar\u0131n\u0131 <code >OU=Sales<\/code> alt\u0131nda toplay\u0131p GPO'yu buraya ba\u011flamak daha etkilidir.<\/li> <\/ul> <div > <h3><strong data-spm-anchor-> \"Bilgisayar Ad\u0131\" Hedeflemek \u0130\u00e7in Alternatif Y\u00f6ntemler<\/strong><\/h3> <h4><strong>\u00a0G\u00fcvenlik Gruplar\u0131 ve G\u00fcvenlik Filtreleme<\/strong><\/h4> <ol start=\"1\"> <li>Active Directory'de bir <strong>g\u00fcvenlik grubu <\/strong>olu\u015fturun (\u00f6rne\u011fin, <code >GPO_Target_Computers<\/code>).<\/li> <li>Bu gruba hedef bilgisayarlar\u0131 ekleyin.<\/li> <li>GPO'nun <strong>Security Filtering <\/strong>b\u00f6l\u00fcm\u00fcnde varsay\u0131lan kullan\u0131c\u0131lar\/gruplar\u0131 kald\u0131r\u0131p yaln\u0131zca bu grubu b\u0131rak\u0131n.<\/li> <\/ol> <h4><strong data-spm-anchor->WMI Filtresi ile Dinamik Hedefleme<\/strong><\/h4> GPMC'de WMI filtresi olu\u015fturun: <pre  data-enlighter-language=\"generic\">SELECT * FROM Win32_ComputerSystem WHERE Name IN (\"PC001\", \"PC002\")<\/pre> Bu filtreyi GPO'ya ba\u011flay\u0131n. GPO, yaln\u0131zca WMI sorgusunu kar\u015f\u0131layan cihazlara uygulan\u0131r. <h4><strong data-spm-anchor->PowerShell ile Otomatik Grup Atamas\u0131<\/strong><\/h4> <pre  data-enlighter-language=\"generic\"># \u00d6rnek: Belirli bilgisayarlar\u0131 bir gruba ekle $computers = \"PC001\", \"PC002\" $groupName = \"GPO_Target_Computers\" foreach ($computer in $computers) { Add-ADGroupMember -Identity $groupName -Members $computer }<\/pre> <h3><strong data-spm-anchor->\u00d6\u011fe D\u00fczeyi Hedeflemenin Avantajlar\u0131<\/strong><\/h3> <ul> <li><strong>Dinamik Uygulama: <\/strong>Cihaz\u0131n donan\u0131m\/sofware durumuna g\u00f6re politika uygulan\u0131r (\u00f6rne\u011fin, sadece SSD'li makineler).<\/li> <li><strong>Y\u00f6netim Kolayl\u0131\u011f\u0131: <\/strong>Benzer \u00f6zelliklere sahip cihazlar i\u00e7in tek bir GPO yeterlidir.<\/li> <li><strong>Esneklik: <\/strong>Birden fazla ko\u015ful birle\u015ftirilebilir (\u00f6rne\u011fin, pil varsa ve CPU h\u0131z\u0131 2.5 GHz'den b\u00fcy\u00fckse).<\/li> <\/ul> <ul> <li data-spm-anchor-><strong>Statik Tan\u0131mlamalar \u0130\u00e7in OU Kullan\u0131n: <\/strong>Bilgisayar adlar\u0131na g\u00f6re de\u011fil, mant\u0131ksal gruplar (\u00f6rne\u011fin, departmanlar, lokasyonlar) \u00fczerinden organize olun.<\/li> <li><strong>WMI Filtrelerini Test Edin: <\/strong>Karma\u015f\u0131k sorgular \u00fcretmeden \u00f6nce <code >wbemtest<\/code> veya PowerShell ile test edin.<\/li> <li><strong>G\u00fcvenlik Gruplar\u0131n\u0131 D\u00fczenli Temizleyin: <\/strong>Art\u0131k gerekli olmayan bilgisayarlar\u0131 gruplardan kald\u0131r\u0131n.<\/li> <\/ul> <h3><strong>Troubleshooting \/ Sorun giderme:<\/strong><\/h3> <div > <div > <table > <thead > <tr > <th  scope=\"col\"> <div ><strong>Soru<\/strong><\/div><\/th> <th  scope=\"col\"> <div ><strong>\u00c7\u00f6z\u00fcm<\/strong><\/div><\/th> <\/tr> <\/thead> <tbody> <tr > <td > <div ><strong>WMI Filtresi Uygulanm\u0131yor Mu?<\/strong><\/div><\/td> <td > <div >Sorguyu do\u011frulay\u0131n (<code >wbemtest<\/code>kullanarak). GPO'nun hedef bilgisayarda etkin oldu\u011fundan emin olun.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>Bilgisayar Gruba Eklenmiyor Mu?<\/strong><\/div><\/td> <td > <div >PowerShell beti\u011finin do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve izinlerin uygun oldu\u011funu kontrol edin.<\/div><\/td> <\/tr> <tr > <td > <div ><strong>GPO Uygulanm\u0131yor Mu?<\/strong><\/div><\/td> <td > <div ><code >GPResult \/H<\/code>komutuyla uygulanan GPO'lar\u0131 ve hedeflemeleri g\u00f6zden ge\u00e7irin.<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> <p data-spm-anchor->\"\u00d6\u011fe D\u00fczeyi Hedefleme\", cihazlar\u0131n dinamik \u00f6zelliklerine g\u00f6re politika uygulamak i\u00e7in g\u00fc\u00e7l\u00fc bir \u00f6zelliktir. Ancak, \"Bilgisayar Ad\u0131 Hedefleme\" gibi statik tan\u0131mlamalar bu yap\u0131ya uymaz. Bu ihtiya\u00e7, <strong>G\u00fcvenlik Filtreleme <\/strong>, <strong>WMI Filtreleri <\/strong>veya <strong>OU yap\u0131s\u0131 <\/strong>gibi alternatif y\u00f6ntemlerle kar\u015f\u0131lanabilir. Bu yakla\u015f\u0131m, y\u00f6netim kolayl\u0131\u011f\u0131 ve esnekli\u011fi a\u00e7\u0131s\u0131ndan daha uygundur.WMI sorgular\u0131 yazarken <code >Win32_ComputerSystem<\/code> s\u0131n\u0131f\u0131n\u0131n <code >Name<\/code> \u00f6zelli\u011fini kullanarak bilgisayar adlar\u0131n\u0131 hedefleyebilirsiniz. <code >wbemtest<\/code> arac\u0131yla sorgular\u0131n\u0131z\u0131 test edin.<\/p> <p data-spm-anchor->bu yaz\u0131 GPO hedefleme y\u00f6ntemlerini \u00f6\u011frenmek isteyen BT y\u00f6neticilerine rehberlik olaca\u011f\u0131na inan\u0131yorum. Sorunsuz sistemler dilerim.<\/p> <\/div> <\/div>","excerpt":"Group Policy (GPO) y\u00f6netimi s\u0131ras\u0131nda, politikalar\u0131n belirli donan\u0131m veya yaz\u0131l\u0131m \u00f6zelliklerine sahip cihazlara uygulanmas\u0131n\u0131 sa\u011flamak...","created_at":"2025-05-01 13:57:27","updated_at":"2026-09-07 15:21:20","category_id":6,"view_count":785,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 13:57:27","featured_image":"resimyok.jpg","slug":"gpo-oge-duzeyi-hedefleme-item-level-targeting","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]