Loopback

[john]

Sorry, it was supposed to say 'applies' not 'replies'!

The GPO with loopback set (in Replace mode), that is
applied to the computer, is not directly applied to the
user (i.e. the user is not in the OU the GPO is applied
to - only the computer is in this OU). If the user logs
on at the computer, am I right in thinking that the user
will receive both the computer and the user configuration
settings from this GPO, and only these settings (as
loopback is in replace mode).

Thanks

john

 

[Gary Mudgett [MSFT]]

Take a look a the following article:
231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287

- Merge Mode In this mode, when the user logs on, the user's list of
GPOs is gathered normally by using the GetGPOList function. The
GetGPOList function is then called again, using the computer's location
in Active Directory. The list of GPOs for the computer is then added to
the end of the GPOs for the user. This causes the computer's GPOs to
have higher precedence than the user's GPOs. In this example, the list
of GPOs for the computer is added to the user's list.

- Replace Mode In this mode, the user's list of GPOs is not gathered.
Only the list of GPOs based on the computer object is used.


--
--
Gary Mudgett, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.