It's solved. As Masken said, WMI filtering does only work with WXP/2003 or higher. But on our test domein, we raised the domain level to 2003 native (from 2000 mixed), and then we can use Domain Local Security groups in a GPO security filter.
Thankz for all the help guys!
_________________________
Kind regards,
