tag:blogger.com,1999:blog-6651313754316039486.post4146362149904330353..comments2024-03-26T15:05:46.851+01:00Comments on What you can do, should do and should NOT do with GPOs: Loopback demystifiedMartin Binderhttp://www.blogger.com/profile/10868219832141484922noreply@blogger.comBlogger16125tag:blogger.com,1999:blog-6651313754316039486.post-84801407380439868362022-02-15T17:19:24.386+01:002022-02-15T17:19:24.386+01:00Loopback is not a "per GPO setting", but...Loopback is not a "per GPO setting", but a "per computer setting". It is either enabled or disabled for _all_ user GPOs applied on this computer. So, the usual precedence of GPO settings applies and the last applied GPO containing loopback settings wins.<br /><br />And it is a computer setting only. This makes your sample somewhat senseless :-)Martin Binderhttps://www.blogger.com/profile/10868219832141484922noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-42318453919423560042022-02-15T15:59:52.068+01:002022-02-15T15:59:52.068+01:00Hello Martin, It is very nice article.
I have a qu...Hello Martin, It is very nice article.<br />I have a question. What if you have to apply multiple GPOs to the Terminal Server OU for the users, the GPOs are mixed with user and computer policies. Are all of the GPOs linked to the OU supposed to have "lookback processing" setup ? or just one of them in the higher precedence will win over? <br /><br />for example:<br /><br />order 1: user configuration - loopback processing "merge" enabled<br />order 2: user configuration - no loopback processing enabled<br />order 3: computer configuration - no loopback processing enabled <br /><br />if the case above example since the order 1 GPO has loopback processing enabled win over, are the order 2 and order 3 GPOs applied as "loopback processing - merge" enabled? or we still have to each GPO to set loopback processing enabled ?Kris H.noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-67521337487694347202016-05-13T08:49:05.733+02:002016-05-13T08:49:05.733+02:00You need a second GPO that disables the screen sav...You need a second GPO that disables the screen saver. Link this GPO to the OU with your 3 computers and move it to the top of linked GPOs. Or have a look at my post about "How to save my screen" :-)Martin Binderhttps://www.blogger.com/profile/10868219832141484922noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-58046228867272495152016-05-10T18:25:13.019+02:002016-05-10T18:25:13.019+02:00I'm sorry.. I must have a mental block. Let me...I'm sorry.. I must have a mental block. Let me ask, I have a user GPO that I created to enforce screen saver passwords on all users' workstations EXCEPT for 3 workstations. My GPO is linked to the users OU and the Dispatch Computers OU that has the 3 workstations that I don't want the screen saver enabled. My Loopback is set to Replace. I thought that it would not enable the screen saver on the 3 workstations in the Dispatch Computers OU? It is applying the screen saver to all users even if they are logged into the 3 dispatch workstations. What am I missing? Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-64378372549131914682015-12-10T19:45:13.235+01:002015-12-10T19:45:13.235+01:00Very nice!Very nice!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-59844957098241172902015-08-07T13:00:58.291+02:002015-08-07T13:00:58.291+02:00You don't "create" it, you simply &q...You don't "create" it, you simply "enable" it: Computer config - Policies - ADM Templates - System - Group Policy.Martin Binderhttps://www.blogger.com/profile/10868219832141484922noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-82967867608566071482015-08-06T22:17:46.453+02:002015-08-06T22:17:46.453+02:00sorry, maybe i had a very long day. But how do you...sorry, maybe i had a very long day. But how do you create a loopback?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-81064667717669387572015-04-16T18:51:32.421+02:002015-04-16T18:51:32.421+02:00Loopback isn't enabled "per GPO", bu...Loopback isn't enabled "per GPO", but "per computer". So it doesn't matter which GPO enables loopback - if it's enabled, it hits all GPOs.Martin Binderhttps://www.blogger.com/profile/10868219832141484922noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-46022070657233084692015-04-16T09:37:46.344+02:002015-04-16T09:37:46.344+02:00When you have a Computer OU with 4 different OU...When you have a Computer OU with 4 different OU's on it...(GPO1-GPO2-GPO3-GPO4) and you enable LoopBack on GPO1...dose the Loopback hit GPO2-GPO3-GPO4 as well ? or dose i need to apply Loopback on GPO2-3-4 as well ? <br />Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-28748419196337437732013-10-17T14:27:42.964+02:002013-10-17T14:27:42.964+02:00This comment has been removed by a blog administrator.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-36147294629698757412013-10-04T09:47:27.626+02:002013-10-04T09:47:27.626+02:00Very informative and well written post! Quite inte... Very informative and well written post! Quite interesting and nice topic chosen for the post.<br /><br /><a href="http://www.onlinemarket360.com/products/Toshiba-%252d-13.3%22-Portege-Notebook-%252d-4-GB-Memory-%252d-320-GB-Hard-Drive-%252d-Black.html/" title="Toshiba - 13.3" rel="nofollow">Toshiba - 13.3" Portege Notebook - 4 GB Memory - 320 GB Hard Drive - Black</a><br><br /><a href="http://www.onlinemarket360.com/products/Toshiba-%252d-15.6%22-Satellite-Laptop-%252d-6GB-Memory-%252d-640GB-Hard-Drive-%252d-Slate.html/" title="Toshiba - 15.6" rel="nofollow">Toshiba - 15.6" Satellite Laptop - 6GB Memory - 640GB Hard Drive - Slate</a><br />Anonymoushttps://www.blogger.com/profile/03544003491166166039noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-90708519703568756862013-06-19T09:52:34.642+02:002013-06-19T09:52:34.642+02:00You are GREAT !!!! well done, keep sharing.You are GREAT !!!! well done, keep sharing.Deva......https://www.blogger.com/profile/12251802289166505732noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-50153617601844996602013-05-06T22:08:34.403+02:002013-05-06T22:08:34.403+02:00I'm full of thoughts about what might be worth...I'm full of thoughts about what might be worth posting - but at the moment,I'm quite busy... Sorry, and stay tuned anyway ;-)Martin Binderhttps://www.blogger.com/profile/10868219832141484922noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-19990230627982200092013-05-06T15:03:04.947+02:002013-05-06T15:03:04.947+02:00Thank you for explaining how enforcement relates t...Thank you for explaining how enforcement relates to loopback! I would love to see some more posts as well! :)Josephhttps://www.blogger.com/profile/07134203932393506414noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-29941722459199062922012-05-31T17:16:53.050+02:002012-05-31T17:16:53.050+02:00Thanks very much Garret! Has been quiet here for s...Thanks very much Garret! Has been quiet here for some time, but hopefully more posts are up to come ;-)Martin Binderhttps://www.blogger.com/profile/10868219832141484922noreply@blogger.comtag:blogger.com,1999:blog-6651313754316039486.post-76813744864879882762012-05-31T16:49:20.830+02:002012-05-31T16:49:20.830+02:00You have done a great job of laying this out with ...You have done a great job of laying this out with plenty of visual aids, anybody should be able to understand now!<br /><br />Found your blog via Technet Group Policy forum<br />-Garrett RAnonymousnoreply@blogger.com