Loopback processing

[Phil]

Hi

I'm in the process of setting up loopback processing and would like to check
a couple of things.

I have set up the GPo "TS Computer" to Replace and applied it to the Ou in
which the TS are members of and given the TS Users "read" and "apply group
policy" and TS Admins "Deny Group policy"
All my settings are in the computer configuration and i have disabled the
user configuration.
Now I want a seperate GPO for TS Users, called TSUsers

do I still need to set Looback to replace here as well? I am assuming that
I apply it to the same OU that the Terminal servers are in?

 

[Lanwench [MVP - Exchange]]

Re: Loopback processing

Phil <Phil@discussions.microsoft.com> wrote:
> Hi
>
> I'm in the process of setting up loopback processing and would like
> to check a couple of things.
>
> I have set up the GPo "TS Computer" to Replace and applied it to the
> Ou in which the TS are members of and given the TS Users "read" and
> "apply group policy" and TS Admins "Deny Group policy"
> All my settings are in the computer configuration and i have disabled
> the user configuration.

Then loopback processing doesn't apply here. Loopback refers only to user
configuration settings.

>
> Now I want a seperate GPO for TS Users, called TSUsers
>
> do I still need to set Looback to replace here as well?

Yes - unless you want to modify (and perhaps rename) your existing TS
Computer policy.

> I am
> assuming that I apply it to the same OU that the Terminal servers are
> in?

Yes.

You might subscribe to microsoft.public.windows.group_policy for more help
with this sort of thing - GP is very powerful but can get confusing (at
least, I find it so).

 

[Phil]

Re: Loopback processing

Hi thanks for the reply, but I think it is more terminal Server related as
loopback normally applies to Terminal Servers.

Hopefully someone can shed some light and confirm that loppback needs to be
set on both TS Machine policy and TS user policy on the same OU?



"Lanwench [MVP - Exchange]" wrote:

> Phil <Phil@discussions.microsoft.com> wrote:
> > Hi
> >
> > I'm in the process of setting up loopback processing and would like
> > to check a couple of things.
> >
> > I have set up the GPo "TS Computer" to Replace and applied it to the
> > Ou in which the TS are members of and given the TS Users "read" and
> > "apply group policy" and TS Admins "Deny Group policy"
> > All my settings are in the computer configuration and i have disabled
> > the user configuration.
>
> Then loopback processing doesn't apply here. Loopback refers only to user
> configuration settings.
>
> >
> > Now I want a seperate GPO for TS Users, called TSUsers
> >
> > do I still need to set Looback to replace here as well?
>
> Yes - unless you want to modify (and perhaps rename) your existing TS
> Computer policy.
>
> > I am
> > assuming that I apply it to the same OU that the Terminal servers are
> > in?
>
> Yes.
>
> You might subscribe to microsoft.public.windows.group_policy for more help
> with this sort of thing - GP is very powerful but can get confusing (at
> least, I find it so).
>
>
>
>

 

[Jeff Pitsch]

Re: Loopback processing

I'm not sure I understand but Loopback processing setting is only available
in the machine settings. It forces the machine to process user policies at
the OU level of where the machine is present.

--
Jeff Pitsch
Microsoft MVP - Terminal Services

"Phil" <Phil@discussions.microsoft.com> wrote in message
news:F553275A-21A9-4719-8467-1202688B6279@microsoft.com...
> Hi thanks for the reply, but I think it is more terminal Server related as
> loopback normally applies to Terminal Servers.
>
> Hopefully someone can shed some light and confirm that loppback needs to
> be
> set on both TS Machine policy and TS user policy on the same OU?
>
>
>
> "Lanwench [MVP - Exchange]" wrote:
>
>> Phil <Phil@discussions.microsoft.com> wrote:
>> > Hi
>> >
>> > I'm in the process of setting up loopback processing and would like
>> > to check a couple of things.
>> >
>> > I have set up the GPo "TS Computer" to Replace and applied it to the
>> > Ou in which the TS are members of and given the TS Users "read" and
>> > "apply group policy" and TS Admins "Deny Group policy"
>> > All my settings are in the computer configuration and i have disabled
>> > the user configuration.
>>
>> Then loopback processing doesn't apply here. Loopback refers only to user
>> configuration settings.
>>
>> >
>> > Now I want a seperate GPO for TS Users, called TSUsers
>> >
>> > do I still need to set Looback to replace here as well?
>>
>> Yes - unless you want to modify (and perhaps rename) your existing TS
>> Computer policy.
>>
>> > I am
>> > assuming that I apply it to the same OU that the Terminal servers are
>> > in?
>>
>> Yes.
>>
>> You might subscribe to microsoft.public.windows.group_policy for more
>> help
>> with this sort of thing - GP is very powerful but can get confusing (at
>> least, I find it so).
>>
>>
>>
>>

 

[Lanwench [MVP - Exchange]]

Re: Loopback processing

Phil <Phil@discussions.microsoft.com> wrote:
> Hi thanks for the reply, but I think it is more terminal Server
> related as loopback normally applies to Terminal Servers.

No, it can be used anywhere. It happens to be very useful for TS, but that
isn't its raison d'etre.
>
> Hopefully someone can shed some light and confirm that loppback needs
> to be set on both TS Machine policy and TS user policy on the same OU?

Did you read my reply thoroughly? Loopback processing is *set* in the
machine section, but it *applies* only to user configurations. What it means
is, "no matter who logs into this machine, apply the user settings from this
GPO no matter what OU the user is in"
>
>
>
> "Lanwench [MVP - Exchange]" wrote:
>
>> Phil <Phil@discussions.microsoft.com> wrote:
>>> Hi
>>>
>>> I'm in the process of setting up loopback processing and would like
>>> to check a couple of things.
>>>
>>> I have set up the GPo "TS Computer" to Replace and applied it to the
>>> Ou in which the TS are members of and given the TS Users "read" and
>>> "apply group policy" and TS Admins "Deny Group policy"
>>> All my settings are in the computer configuration and i have
>>> disabled the user configuration.
>>
>> Then loopback processing doesn't apply here. Loopback refers only to
>> user configuration settings.
>>
>>>
>>> Now I want a seperate GPO for TS Users, called TSUsers
>>>
>>> do I still need to set Looback to replace here as well?
>>
>> Yes - unless you want to modify (and perhaps rename) your existing TS
>> Computer policy.
>>
>>> I am
>>> assuming that I apply it to the same OU that the Terminal servers
>>> are in?
>>
>> Yes.
>>
>> You might subscribe to microsoft.public.windows.group_policy for
>> more help with this sort of thing - GP is very powerful but can get
>> confusing (at least, I find it so).

 

[Jeff Pitsch]

Re: Loopback processing

Lanwench is completely correct. Loopback processing was originally intended
for Kiosk type machines. We terminal services people hijacked it for our
own uses as well.

--
Jeff Pitsch
Microsoft MVP - Terminal Services

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:eLFHcJ4FJHA.2508@TK2MSFTNGP06.phx.gbl...
> Phil <Phil@discussions.microsoft.com> wrote:
>> Hi thanks for the reply, but I think it is more terminal Server
>> related as loopback normally applies to Terminal Servers.
>
> No, it can be used anywhere. It happens to be very useful for TS, but that
> isn't its raison d'etre.
>>
>> Hopefully someone can shed some light and confirm that loppback needs
>> to be set on both TS Machine policy and TS user policy on the same OU?
>
> Did you read my reply thoroughly? Loopback processing is *set* in the
> machine section, but it *applies* only to user configurations. What it
> means is, "no matter who logs into this machine, apply the user settings
> from this GPO no matter what OU the user is in"
>>
>>
>>
>> "Lanwench [MVP - Exchange]" wrote:
>>
>>> Phil <Phil@discussions.microsoft.com> wrote:
>>>> Hi
>>>>
>>>> I'm in the process of setting up loopback processing and would like
>>>> to check a couple of things.
>>>>
>>>> I have set up the GPo "TS Computer" to Replace and applied it to the
>>>> Ou in which the TS are members of and given the TS Users "read" and
>>>> "apply group policy" and TS Admins "Deny Group policy"
>>>> All my settings are in the computer configuration and i have
>>>> disabled the user configuration.
>>>
>>> Then loopback processing doesn't apply here. Loopback refers only to
>>> user configuration settings.
>>>
>>>>
>>>> Now I want a seperate GPO for TS Users, called TSUsers
>>>>
>>>> do I still need to set Looback to replace here as well?
>>>
>>> Yes - unless you want to modify (and perhaps rename) your existing TS
>>> Computer policy.
>>>
>>>> I am
>>>> assuming that I apply it to the same OU that the Terminal servers
>>>> are in?
>>>
>>> Yes.
>>>
>>> You might subscribe to microsoft.public.windows.group_policy for
>>> more help with this sort of thing - GP is very powerful but can get
>>> confusing (at least, I find it so).
>
>
>

 

[Lanwench [MVP - Exchange]]

Re: Loopback processing

Jeff Pitsch <jeff@jeffpitschconsulting.com> wrote:
> Lanwench is completely correct. Loopback processing was originally
> intended for Kiosk type machines. We terminal services people
> hijacked it for our own uses as well.

And then you killed Kenny, you bastards.
>
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:eLFHcJ4FJHA.2508@TK2MSFTNGP06.phx.gbl...
>> Phil <Phil@discussions.microsoft.com> wrote:
>>> Hi thanks for the reply, but I think it is more terminal Server
>>> related as loopback normally applies to Terminal Servers.
>>
>> No, it can be used anywhere. It happens to be very useful for TS,
>> but that isn't its raison d'etre.
>>>
>>> Hopefully someone can shed some light and confirm that loppback
>>> needs to be set on both TS Machine policy and TS user policy on the
>>> same OU?
>>
>> Did you read my reply thoroughly? Loopback processing is *set* in the
>> machine section, but it *applies* only to user configurations. What
>> it means is, "no matter who logs into this machine, apply the user
>> settings from this GPO no matter what OU the user is in"
>>>
>>>
>>>
>>> "Lanwench [MVP - Exchange]" wrote:
>>>
>>>> Phil <Phil@discussions.microsoft.com> wrote:
>>>>> Hi
>>>>>
>>>>> I'm in the process of setting up loopback processing and would
>>>>> like to check a couple of things.
>>>>>
>>>>> I have set up the GPo "TS Computer" to Replace and applied it to
>>>>> the Ou in which the TS are members of and given the TS Users
>>>>> "read" and "apply group policy" and TS Admins "Deny Group policy"
>>>>> All my settings are in the computer configuration and i have
>>>>> disabled the user configuration.
>>>>
>>>> Then loopback processing doesn't apply here. Loopback refers only
>>>> to user configuration settings.
>>>>
>>>>>
>>>>> Now I want a seperate GPO for TS Users, called TSUsers
>>>>>
>>>>> do I still need to set Looback to replace here as well?
>>>>
>>>> Yes - unless you want to modify (and perhaps rename) your existing
>>>> TS Computer policy.
>>>>
>>>>> I am
>>>>> assuming that I apply it to the same OU that the Terminal servers
>>>>> are in?
>>>>
>>>> Yes.
>>>>
>>>> You might subscribe to microsoft.public.windows.group_policy for
>>>> more help with this sort of thing - GP is very powerful but can get
>>>> confusing (at least, I find it so).

 

[Jeff Pitsch]

Re: Loopback processing

ROFLMAO

--
Jeff Pitsch
Microsoft MVP - Terminal Services

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:%23%23LE624FJHA.3848@TK2MSFTNGP02.phx.gbl...
> Jeff Pitsch <jeff@jeffpitschconsulting.com> wrote:
>> Lanwench is completely correct. Loopback processing was originally
>> intended for Kiosk type machines. We terminal services people
>> hijacked it for our own uses as well.
>
> And then you killed Kenny, you bastards.
>>
>>
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
>> message news:eLFHcJ4FJHA.2508@TK2MSFTNGP06.phx.gbl...
>>> Phil <Phil@discussions.microsoft.com> wrote:
>>>> Hi thanks for the reply, but I think it is more terminal Server
>>>> related as loopback normally applies to Terminal Servers.
>>>
>>> No, it can be used anywhere. It happens to be very useful for TS,
>>> but that isn't its raison d'etre.
>>>>
>>>> Hopefully someone can shed some light and confirm that loppback
>>>> needs to be set on both TS Machine policy and TS user policy on the
>>>> same OU?
>>>
>>> Did you read my reply thoroughly? Loopback processing is *set* in the
>>> machine section, but it *applies* only to user configurations. What
>>> it means is, "no matter who logs into this machine, apply the user
>>> settings from this GPO no matter what OU the user is in"
>>>>
>>>>
>>>>
>>>> "Lanwench [MVP - Exchange]" wrote:
>>>>
>>>>> Phil <Phil@discussions.microsoft.com> wrote:
>>>>>> Hi
>>>>>>
>>>>>> I'm in the process of setting up loopback processing and would
>>>>>> like to check a couple of things.
>>>>>>
>>>>>> I have set up the GPo "TS Computer" to Replace and applied it to
>>>>>> the Ou in which the TS are members of and given the TS Users
>>>>>> "read" and "apply group policy" and TS Admins "Deny Group policy"
>>>>>> All my settings are in the computer configuration and i have
>>>>>> disabled the user configuration.
>>>>>
>>>>> Then loopback processing doesn't apply here. Loopback refers only
>>>>> to user configuration settings.
>>>>>
>>>>>>
>>>>>> Now I want a seperate GPO for TS Users, called TSUsers
>>>>>>
>>>>>> do I still need to set Looback to replace here as well?
>>>>>
>>>>> Yes - unless you want to modify (and perhaps rename) your existing
>>>>> TS Computer policy.
>>>>>
>>>>>> I am
>>>>>> assuming that I apply it to the same OU that the Terminal servers
>>>>>> are in?
>>>>>
>>>>> Yes.
>>>>>
>>>>> You might subscribe to microsoft.public.windows.group_policy for
>>>>> more help with this sort of thing - GP is very powerful but can get
>>>>> confusing (at least, I find it so).
>
>
>