If you installed FEP 2010 and looked at the collections in ConfigMgr you’ll notice every collection under FEP Collections is locked and you can’t even view the Membership Rules Query. This is normal and by design. I guess Microsoft doesn’t want you messing with their carefully throughout, planned, and very specific membership rules for FEP.
Now you might be asking yourself what they look like. I asked myself that same question. I don’t plan on making any changes but I was just curious what they looked like. After poking around in SQL I found the tables where the names of the collections are stored and where the queries are also stored. Both tables are in the SMS_3DIGITSITECODE database if you kept the defaults (example SMS_AJR). The first table is dbo.Collection_Rules. It holds the CollectionID and QueryName. That’s basically the same things as the collection name. The second table is the dbo.Collection_Rules_SQL where the actual WQL and SQL language is. They’re linked together by collection ID numbers but I made it more user friendly. The results are below.
Tab delimited text file:
After looking at the query language now I know why Microsoft locked them, so users can’t mess them up !