Guest Phil Posted September 14, 2008 Posted September 14, 2008 Hi I'm in the process of setting up loopback processing and would like to check a couple of things. I have set up the GPo "TS Computer" to Replace and applied it to the Ou in which the TS are members of and given the TS Users "read" and "apply group policy" and TS Admins "Deny Group policy" All my settings are in the computer configuration and i have disabled the user configuration. Now I want a seperate GPO for TS Users, called TSUsers do I still need to set Looback to replace here as well? I am assuming that I apply it to the same OU that the Terminal servers are in?
Guest Lanwench [MVP - Exchange] Posted September 15, 2008 Posted September 15, 2008 Re: Loopback processing Phil <Phil@discussions.microsoft.com> wrote: > Hi > > I'm in the process of setting up loopback processing and would like > to check a couple of things. > > I have set up the GPo "TS Computer" to Replace and applied it to the > Ou in which the TS are members of and given the TS Users "read" and > "apply group policy" and TS Admins "Deny Group policy" > All my settings are in the computer configuration and i have disabled > the user configuration. Then loopback processing doesn't apply here. Loopback refers only to user configuration settings. > > Now I want a seperate GPO for TS Users, called TSUsers > > do I still need to set Looback to replace here as well? Yes - unless you want to modify (and perhaps rename) your existing TS Computer policy. > I am > assuming that I apply it to the same OU that the Terminal servers are > in? Yes. You might subscribe to microsoft.public.windows.group_policy for more help with this sort of thing - GP is very powerful but can get confusing (at least, I find it so).
Guest Phil Posted September 15, 2008 Posted September 15, 2008 Re: Loopback processing Hi thanks for the reply, but I think it is more terminal Server related as loopback normally applies to Terminal Servers. Hopefully someone can shed some light and confirm that loppback needs to be set on both TS Machine policy and TS user policy on the same OU? "Lanwench [MVP - Exchange]" wrote: > Phil <Phil@discussions.microsoft.com> wrote: > > Hi > > > > I'm in the process of setting up loopback processing and would like > > to check a couple of things. > > > > I have set up the GPo "TS Computer" to Replace and applied it to the > > Ou in which the TS are members of and given the TS Users "read" and > > "apply group policy" and TS Admins "Deny Group policy" > > All my settings are in the computer configuration and i have disabled > > the user configuration. > > Then loopback processing doesn't apply here. Loopback refers only to user > configuration settings. > > > > > Now I want a seperate GPO for TS Users, called TSUsers > > > > do I still need to set Looback to replace here as well? > > Yes - unless you want to modify (and perhaps rename) your existing TS > Computer policy. > > > I am > > assuming that I apply it to the same OU that the Terminal servers are > > in? > > Yes. > > You might subscribe to microsoft.public.windows.group_policy for more help > with this sort of thing - GP is very powerful but can get confusing (at > least, I find it so). > > > >
Guest Jeff Pitsch Posted September 15, 2008 Posted September 15, 2008 Re: Loopback processing I'm not sure I understand but Loopback processing setting is only available in the machine settings. It forces the machine to process user policies at the OU level of where the machine is present. -- Jeff Pitsch Microsoft MVP - Terminal Services "Phil" <Phil@discussions.microsoft.com> wrote in message news:F553275A-21A9-4719-8467-1202688B6279@microsoft.com... > Hi thanks for the reply, but I think it is more terminal Server related as > loopback normally applies to Terminal Servers. > > Hopefully someone can shed some light and confirm that loppback needs to > be > set on both TS Machine policy and TS user policy on the same OU? > > > > "Lanwench [MVP - Exchange]" wrote: > >> Phil <Phil@discussions.microsoft.com> wrote: >> > Hi >> > >> > I'm in the process of setting up loopback processing and would like >> > to check a couple of things. >> > >> > I have set up the GPo "TS Computer" to Replace and applied it to the >> > Ou in which the TS are members of and given the TS Users "read" and >> > "apply group policy" and TS Admins "Deny Group policy" >> > All my settings are in the computer configuration and i have disabled >> > the user configuration. >> >> Then loopback processing doesn't apply here. Loopback refers only to user >> configuration settings. >> >> > >> > Now I want a seperate GPO for TS Users, called TSUsers >> > >> > do I still need to set Looback to replace here as well? >> >> Yes - unless you want to modify (and perhaps rename) your existing TS >> Computer policy. >> >> > I am >> > assuming that I apply it to the same OU that the Terminal servers are >> > in? >> >> Yes. >> >> You might subscribe to microsoft.public.windows.group_policy for more >> help >> with this sort of thing - GP is very powerful but can get confusing (at >> least, I find it so). >> >> >> >>
Guest Lanwench [MVP - Exchange] Posted September 15, 2008 Posted September 15, 2008 Re: Loopback processing Phil <Phil@discussions.microsoft.com> wrote: > Hi thanks for the reply, but I think it is more terminal Server > related as loopback normally applies to Terminal Servers. No, it can be used anywhere. It happens to be very useful for TS, but that isn't its raison d'etre. > > Hopefully someone can shed some light and confirm that loppback needs > to be set on both TS Machine policy and TS user policy on the same OU? Did you read my reply thoroughly? Loopback processing is *set* in the machine section, but it *applies* only to user configurations. What it means is, "no matter who logs into this machine, apply the user settings from this GPO no matter what OU the user is in" > > > > "Lanwench [MVP - Exchange]" wrote: > >> Phil <Phil@discussions.microsoft.com> wrote: >>> Hi >>> >>> I'm in the process of setting up loopback processing and would like >>> to check a couple of things. >>> >>> I have set up the GPo "TS Computer" to Replace and applied it to the >>> Ou in which the TS are members of and given the TS Users "read" and >>> "apply group policy" and TS Admins "Deny Group policy" >>> All my settings are in the computer configuration and i have >>> disabled the user configuration. >> >> Then loopback processing doesn't apply here. Loopback refers only to >> user configuration settings. >> >>> >>> Now I want a seperate GPO for TS Users, called TSUsers >>> >>> do I still need to set Looback to replace here as well? >> >> Yes - unless you want to modify (and perhaps rename) your existing TS >> Computer policy. >> >>> I am >>> assuming that I apply it to the same OU that the Terminal servers >>> are in? >> >> Yes. >> >> You might subscribe to microsoft.public.windows.group_policy for >> more help with this sort of thing - GP is very powerful but can get >> confusing (at least, I find it so).
Guest Jeff Pitsch Posted September 15, 2008 Posted September 15, 2008 Re: Loopback processing Lanwench is completely correct. Loopback processing was originally intended for Kiosk type machines. We terminal services people hijacked it for our own uses as well. -- Jeff Pitsch Microsoft MVP - Terminal Services "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:eLFHcJ4FJHA.2508@TK2MSFTNGP06.phx.gbl... > Phil <Phil@discussions.microsoft.com> wrote: >> Hi thanks for the reply, but I think it is more terminal Server >> related as loopback normally applies to Terminal Servers. > > No, it can be used anywhere. It happens to be very useful for TS, but that > isn't its raison d'etre. >> >> Hopefully someone can shed some light and confirm that loppback needs >> to be set on both TS Machine policy and TS user policy on the same OU? > > Did you read my reply thoroughly? Loopback processing is *set* in the > machine section, but it *applies* only to user configurations. What it > means is, "no matter who logs into this machine, apply the user settings > from this GPO no matter what OU the user is in" >> >> >> >> "Lanwench [MVP - Exchange]" wrote: >> >>> Phil <Phil@discussions.microsoft.com> wrote: >>>> Hi >>>> >>>> I'm in the process of setting up loopback processing and would like >>>> to check a couple of things. >>>> >>>> I have set up the GPo "TS Computer" to Replace and applied it to the >>>> Ou in which the TS are members of and given the TS Users "read" and >>>> "apply group policy" and TS Admins "Deny Group policy" >>>> All my settings are in the computer configuration and i have >>>> disabled the user configuration. >>> >>> Then loopback processing doesn't apply here. Loopback refers only to >>> user configuration settings. >>> >>>> >>>> Now I want a seperate GPO for TS Users, called TSUsers >>>> >>>> do I still need to set Looback to replace here as well? >>> >>> Yes - unless you want to modify (and perhaps rename) your existing TS >>> Computer policy. >>> >>>> I am >>>> assuming that I apply it to the same OU that the Terminal servers >>>> are in? >>> >>> Yes. >>> >>> You might subscribe to microsoft.public.windows.group_policy for >>> more help with this sort of thing - GP is very powerful but can get >>> confusing (at least, I find it so). > > >
Guest Lanwench [MVP - Exchange] Posted September 15, 2008 Posted September 15, 2008 Re: Loopback processing Jeff Pitsch <jeff@jeffpitschconsulting.com> wrote: > Lanwench is completely correct. Loopback processing was originally > intended for Kiosk type machines. We terminal services people > hijacked it for our own uses as well. And then you killed Kenny, you bastards. :) > > > "Lanwench [MVP - Exchange]" > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in > message news:eLFHcJ4FJHA.2508@TK2MSFTNGP06.phx.gbl... >> Phil <Phil@discussions.microsoft.com> wrote: >>> Hi thanks for the reply, but I think it is more terminal Server >>> related as loopback normally applies to Terminal Servers. >> >> No, it can be used anywhere. It happens to be very useful for TS, >> but that isn't its raison d'etre. >>> >>> Hopefully someone can shed some light and confirm that loppback >>> needs to be set on both TS Machine policy and TS user policy on the >>> same OU? >> >> Did you read my reply thoroughly? Loopback processing is *set* in the >> machine section, but it *applies* only to user configurations. What >> it means is, "no matter who logs into this machine, apply the user >> settings from this GPO no matter what OU the user is in" >>> >>> >>> >>> "Lanwench [MVP - Exchange]" wrote: >>> >>>> Phil <Phil@discussions.microsoft.com> wrote: >>>>> Hi >>>>> >>>>> I'm in the process of setting up loopback processing and would >>>>> like to check a couple of things. >>>>> >>>>> I have set up the GPo "TS Computer" to Replace and applied it to >>>>> the Ou in which the TS are members of and given the TS Users >>>>> "read" and "apply group policy" and TS Admins "Deny Group policy" >>>>> All my settings are in the computer configuration and i have >>>>> disabled the user configuration. >>>> >>>> Then loopback processing doesn't apply here. Loopback refers only >>>> to user configuration settings. >>>> >>>>> >>>>> Now I want a seperate GPO for TS Users, called TSUsers >>>>> >>>>> do I still need to set Looback to replace here as well? >>>> >>>> Yes - unless you want to modify (and perhaps rename) your existing >>>> TS Computer policy. >>>> >>>>> I am >>>>> assuming that I apply it to the same OU that the Terminal servers >>>>> are in? >>>> >>>> Yes. >>>> >>>> You might subscribe to microsoft.public.windows.group_policy for >>>> more help with this sort of thing - GP is very powerful but can get >>>> confusing (at least, I find it so).
Guest Jeff Pitsch Posted September 16, 2008 Posted September 16, 2008 Re: Loopback processing ROFLMAO -- Jeff Pitsch Microsoft MVP - Terminal Services "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:%23%23LE624FJHA.3848@TK2MSFTNGP02.phx.gbl... > Jeff Pitsch <jeff@jeffpitschconsulting.com> wrote: >> Lanwench is completely correct. Loopback processing was originally >> intended for Kiosk type machines. We terminal services people >> hijacked it for our own uses as well. > > And then you killed Kenny, you bastards. :) >> >> >> "Lanwench [MVP - Exchange]" >> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in >> message news:eLFHcJ4FJHA.2508@TK2MSFTNGP06.phx.gbl... >>> Phil <Phil@discussions.microsoft.com> wrote: >>>> Hi thanks for the reply, but I think it is more terminal Server >>>> related as loopback normally applies to Terminal Servers. >>> >>> No, it can be used anywhere. It happens to be very useful for TS, >>> but that isn't its raison d'etre. >>>> >>>> Hopefully someone can shed some light and confirm that loppback >>>> needs to be set on both TS Machine policy and TS user policy on the >>>> same OU? >>> >>> Did you read my reply thoroughly? Loopback processing is *set* in the >>> machine section, but it *applies* only to user configurations. What >>> it means is, "no matter who logs into this machine, apply the user >>> settings from this GPO no matter what OU the user is in" >>>> >>>> >>>> >>>> "Lanwench [MVP - Exchange]" wrote: >>>> >>>>> Phil <Phil@discussions.microsoft.com> wrote: >>>>>> Hi >>>>>> >>>>>> I'm in the process of setting up loopback processing and would >>>>>> like to check a couple of things. >>>>>> >>>>>> I have set up the GPo "TS Computer" to Replace and applied it to >>>>>> the Ou in which the TS are members of and given the TS Users >>>>>> "read" and "apply group policy" and TS Admins "Deny Group policy" >>>>>> All my settings are in the computer configuration and i have >>>>>> disabled the user configuration. >>>>> >>>>> Then loopback processing doesn't apply here. Loopback refers only >>>>> to user configuration settings. >>>>> >>>>>> >>>>>> Now I want a seperate GPO for TS Users, called TSUsers >>>>>> >>>>>> do I still need to set Looback to replace here as well? >>>>> >>>>> Yes - unless you want to modify (and perhaps rename) your existing >>>>> TS Computer policy. >>>>> >>>>>> I am >>>>>> assuming that I apply it to the same OU that the Terminal servers >>>>>> are in? >>>>> >>>>> Yes. >>>>> >>>>> You might subscribe to microsoft.public.windows.group_policy for >>>>> more help with this sort of thing - GP is very powerful but can get >>>>> confusing (at least, I find it so). > > >
Recommended Posts