IP Address Range filter for Item Level Targeting is broken in Windows 8

LANI have just come across an issue with the Group Policy Item Level Targeting feature in Windows 8 with relation to the IP Address Range filter option. Namely that computers in an IP Address range are evaluations are not passed even though they are within the IP Address range…

Update: This is a confirmed bug with Windows 8

According the the forum post the following ranges have the following results however I suspect that there are more combinations that might not work correctly.                ->    PASSED                ->    PASSED                ->    FAILED        ->    PASSED        ->    PASSED        ->    PASSED        ->    FAILED        ->    FAILED            ->    FAILED    ->    FAILED    ->    FAILED


Taking a deeper look at the issues I below are the details log of a Windows 8 computer with an IP of As you can see with the IP Filter is set to to it evaluates to false even though it SHOULD evaluate as true as its IP is between these two addresses.



Compared to a logging on to a Windows 7 computer with an IP of the same IP filter with the same policy applied evaluate as passed.


In both cases the computer accounts were in the same OU and I was logged on with the same user account.

Then… after changing the IP Address Filter to to the policy evaluates as TRUE again on Windows 8.


Admittedly that the IP Address filters that are having issues evaluating are not all that practical ( to But it would seem there is a problem with how the IP Address filter evaluation works in Windows 8.

My only recommendation for now is that if you have any IP Filtered Group Policy Preferences applied to a Windows 8 computer I would recommend that you manually verify they are working correctly.

Author: Alan Burchill

Microsoft MVP (Group Policy)

8 thoughts on “IP Address Range filter for Item Level Targeting is broken in Windows 8

Leave a Reply