Loopback Processing not working

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Loopback Processing doesn't seem to be working for me.

to explain:

from the root of my domain tree, one OU contains my users, and one OU
contains my computers... on my computer OU I set GPO loopback processing >
enabled > merge/replace, and on my user OU I did nothing but add computer
specific GPO to re-direct the desktop..

As I understand it, when a user logs onto a computer in Room 9, their User
Group GPO is applied, and then the Computer Group GPO is also applied.

So a user in the Student OU picks up the GPO's applied to that OU, and then
because loopback processing is set on the Computer OU GPO, the user
then gets aplied the GPO's set on that OU.

Could anyone tell me how I can troubleshoot this problem, or let me know
what may be stopping this working.


here is the output from gpresult /z:
------------------------------------------------------------

USER SETTINGS
--------------

Folder Redirection
------------------
GPO: desktop folder test
Setting: InstallationType: basic
Grant Type: Not Exclusive Rights
Move Type: Contents of Local Directory not moved
Policy Removal: Leave folder in existing location
Redirecting Group: Everyone
Redirected Path: \\curric\redirectedfolders\room 9
start menu

GPO: desktop folder test
Setting: InstallationType: basic
Grant Type: Not Exclusive Rights
Move Type: Contents of Local Directory not moved
Policy Removal: Leave folder in existing location
Redirecting Group: Everyone
Redirected Path: \\curric\redirectedfolders\room 9
start menu\Programs

------------------------------------------------------------------

Windows2000 Server/ XP Pro Clients

Thanks

Mark simpson

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

circa Fri, 3 Sep 2004 03:31:04 -0700, in
microsoft.public.win2000.group_policy, =?Utf-8?B?TWFyayBTaW1wc29u?=
(MarkSimpson@discussions.microsoft.com) said,
> Loopback Processing doesn't seem to be working for me.
>
> to explain:
>
> from the root of my domain tree, one OU contains my users, and one OU
> contains my computers... on my computer OU I set GPO loopback processing >
> enabled > merge/replace,

Did you select merge, or did you select replace? There is a
difference.

> and on my user OU I did nothing but add computer
> specific GPO to re-direct the desktop..
>
> As I understand it, when a user logs onto a computer in Room 9, their User
> Group GPO is applied, and then the Computer Group GPO is also applied.

Not quite. When you apply loopback policy in *merge* mode, user
settings (settings in the User Configuration section of GP, not those
in the Computer settings section) are applied based on the policy
linked to where the user account is located, and then user policies
are applied based on where the computer account is located. If you
choose *replace*, user settings are never applied based on the
location of the user object. That's why it is important to specify
whether you chose merge, or replace.
>
> So a user in the Student OU picks up the GPO's applied to that OU, and then
> because loopback processing is set on the Computer OU GPO, the user
> then gets aplied the GPO's set on that OU.
>
> Could anyone tell me how I can troubleshoot this problem, or let me know
> what may be stopping this working.
>
Laura
--
Experience is the name every one gives to their mistakes.
-Oscar Wilde

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Thanks very much Laura

I wasn't quite clear on what merge & replace did.

I have got it set to "merge". Strange thing happenned... loopback suddenly
started working on Friday, I presume because of that effect where a policy
can take a long time to be applied, although I did run secedit to enforce it.

Just got to try it on me restricted GPO now.

Thanks for your help. I'll keep you posted.

Regards
Mark
"Laura A. Robinson [MVP]" wrote:

> circa Fri, 3 Sep 2004 03:31:04 -0700, in
> microsoft.public.win2000.group_policy, =?Utf-8?B?TWFyayBTaW1wc29u?=
> (MarkSimpson@discussions.microsoft.com) said,
> > Loopback Processing doesn't seem to be working for me.
> >
> > to explain:
> >
> > from the root of my domain tree, one OU contains my users, and one OU
> > contains my computers... on my computer OU I set GPO loopback processing >
> > enabled > merge/replace,
>
> Did you select merge, or did you select replace? There is a
> difference.
>
> > and on my user OU I did nothing but add computer
> > specific GPO to re-direct the desktop..
> >
> > As I understand it, when a user logs onto a computer in Room 9, their User
> > Group GPO is applied, and then the Computer Group GPO is also applied.
>
> Not quite. When you apply loopback policy in *merge* mode, user
> settings (settings in the User Configuration section of GP, not those
> in the Computer settings section) are applied based on the policy
> linked to where the user account is located, and then user policies
> are applied based on where the computer account is located. If you
> choose *replace*, user settings are never applied based on the
> location of the user object. That's why it is important to specify
> whether you chose merge, or replace.
> >
> > So a user in the Student OU picks up the GPO's applied to that OU, and then
> > because loopback processing is set on the Computer OU GPO, the user
> > then gets aplied the GPO's set on that OU.
> >
> > Could anyone tell me how I can troubleshoot this problem, or let me know
> > what may be stopping this working.
> >
> Laura
> --
> Experience is the name every one gives to their mistakes.
> -Oscar Wilde
>