Group Policy Loopback Settings

User Group Policy Looback Processing

 

As the name suggests, the policy named “User group policy loopback processing mode” if enabled, allows an administrator to decide what a user would be able to do on an important computer.

Important computers in the corporate network may be computers placed in the server room, or laboratory or in the administration department.

Normally a domain user is allowed to logon to any computer which is part of the domain to which the user belongs.

Consider a scenario:

                                           

+ABCMarketing.com

                  +Sales OU

                            Shankar

                            Raman

                            ComputerS1

                            ComputerS2

                  +Marketing OU

                            Shyam

                            ComputerM1

                  +Administration OU

                            Ahmad

                            SQLServer

 

 

Group Policies at Marketing OU:

            Computer Configuration

            User Configuration:  Hide all icons on the desktop                 Enabled

                                              Allow only following Windows Applications       

                                                                        Winword.exe

                                                                         Excel.exe

                                                                         cmd.exe

                                                                         freecell.exe

                                                                                   

Group Policies at Administration OU:

Scenario 1:

            Computer Configuration

User Policy Loopback processing    Enabled

mode:Replace

            User Configuration:   Hide My Computer icon from desktop Disabled

                                                Do not allow following Windows Applications  

                                                                        Freecell.exe

                                                                        Sol.exe

                                                                        Iexplore.exe

 

Result for Scenario 1: When Shyam (from Marketing OU) logs on to SQL Server (in Administration OU):

 

Resultant User Policies for Shyam:

                        Icons visible on the desktop                  All

                        Applications usable               All on the computer except freecell,

solitare and internet explorer.

 

 

Scenario 2:

            Computer Configuration

User Policy Loopback processing          Enabled

                                                             mode: Merge

            User Configuration:   Hide My Computer icon from desktop Disabled

                                                Do not allow following Windows Applications  

                                                                        Freecell.exe

                                                                        Sol.exe

                                                                        Iexplore.exe

 

 

Result for Scenario 2: When Shyam (from Marketing OU) logs on to SQL Server (in Administration OU):

 

Resultant User Policies for Shyam:

                        Icons visible on the desktop                  My Computer

                        Applications usable                               Winword.exe

                                                                               Excel.exe

                                                                               Cmd.exe

 

 

How?

The loopback policy enabled in the Replace mode replaces the Shyam’s User policies from his own OU (Marketing) with the User Configuration Policies of the SQL Server’s OU (Administration).Hence Shaym’s own user policies are not applied at all.

The loopback policy enabled in the Merge mode, appends the User Configuration policies of the Administration OU (Server’s OU) at the end of the User Configuration Policies of the Marketing OU (Shyam’s OU). Hence Shyam gets all his user policies but in case where there is a conflict, the user policies  from the Administration OU take precedence as they are applied at the end.

10 thoughts on “Group Policy Loopback Settings”

  1. http://www.topbattery.com.au/laptop-ac-adapter/dell/1700.htm Dell 1700 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/1720.htm Dell 1720 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/6400.htm Dell 6400 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/d820.htm Dell d820 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/inspiron-6400.htm Dell inspiron 6400 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/latitude-d620.htm Dell latitude d620 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/latitude-d630.htm Dell latitude d630 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/latitude-d820.htm Dell latitude d820 Adapter http://www.topbattery.com.au/laptop-ac-adapter/hp/dv2000.htm Hp dv2000 Adapter http://www.topbattery.com.au/laptop-ac-adapter/hp/dv4000.htm Hp dv4000 Adapter http://www.topbattery.com.au/laptop-ac-adapter/hp/dv6000.htm Hp dv6000 Adapter http://www.topbattery.com.au/acer/travelmate-4200-series.htm Acer travelmate 4200 series Battery http://www.topbattery.com.au/acer/travelmate-4203-series.htm Acer travelmate 4203 series Battery http://www.topbattery.com.au/laptop-ac-adapter/dell/6400.htm Dell 6400 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/d820.htm Dell d820 Adapter http://www.topbattery.com.au/acer/travelmate-4230-series.htm Acer travelmate 4230 series Battery http://www.topbattery.com.au/apple/a1175.htm Apple a1175 Battery http://www.topbattery.com.au/acer/aspire-5520.htm Acer aspire 5520 Battery http://www.topbattery.com.au/acer/aspire-5920.htm Acer aspire 5920 Battery http://www.topbattery.com.au/acer/batbl50l6.htm Acer batbl50l6 Battery http://www.topbattery.com.au/asus/a42-a2.htm Asus a42-a2 Battery http://www.topbattery.com.au/asus/a4.htm Asus a4 Battery http://www.topbattery.com.au/asus/a42-m6.htm Asus a42-m6 Battery http://www.topbattery.com.au/asus/a42-w1.htm Asus a42-w1 Battery http://www.topbattery.com.au/asus/a42-w3.htm Asus a42-w3 Battery http://www.topbattery.com.au/benq/squ-812.htm Benq squ-812 Battery http://www.topbattery.com.au/compaq/dv1000.htm Compaq dv1000 Battery http://www.topbattery.com.au/compaq/dv2000.htm Compaq dv2000 Battery http://www.topbattery.com.au/compaq/dv2200.htm Compaq dv2200 Battery http://www.topbattery.com.au/dell/inspiron-1525.htm Dell inspiron 1525 Battery http://www.topbattery.com.au/dell/inspiron-1526.htm Dell inspiron 1526 Battery http://www.topbattery.com.au/dell/gw240.htm Dell gw240 Battery http://www.topbattery.com.au/dell/e1405.htm Dell e1405 Battery http://www.topbattery.com.au/dell/d5318.htm Dell d5318 Battery http://www.topbattery.com.au/dell/inspiron-630m.htm Dell inspiron 630m Battery http://www.topbattery.com.au/dell/inspiron-640m.htm Dell inspiron 640m Battery http://www.topbattery.com.au/dell/inspiron-8000.htm Dell inspiron 8000 Battery http://www.topbattery.com.au/dell/inspiron-8100.htm Dell inspiron 8100 Battery http://www.topbattery.com.au/dell/inspiron-8200.htm Dell inspiron 8200 Battery http://www.topbattery.com.au/hp/dv9500.htm Hp dv9500 Battery http://www.topbattery.com.au/sony/vgp-bpl9.htm sony vgp-bpl9 battery http://www.topbattery.com.au/sony/vgp-bps10.htm sony vgp-bps10 battery http://www.topbattery.com.au/sony/vgp-bps8.htm sony vgp-bps8 battery http://www.topbattery.com.au/sony/vgp-bps8a.htm sony vgp-bps8a battery http://www.topbattery.com.au/sony/vgp-bps9.htm sony vgp-bps9 battery

  2. http://www.topbattery.com.au/hp/dv9600.htm Hp dv9600 Battery http://www.topbattery.com.au/hp/dv9700.htm Hp dv9700 Battery http://www.topbattery.com.au/dell/w953g.htm Dell w953g Battery http://www.topbattery.com.au/dell/WG317.htm Dell WG317 Battery http://www.topbattery.com.au/hp/nc8430.htm Hp nc8430 Battery http://www.topbattery.com.au/hp/nw8000.htm Hp nw8000 Battery http://www.topbattery.com.au/hp/nw8200.htm Hp nw8200 Battery http://www.topbattery.com.au/hp/nx7000.htm Hp nx7000 Battery http://www.topbattery.com.au/hp/nx8200.htm Hp nx8200 Battery http://www.topbattery.com.au/ibm/thinkpad-t30.htm Ibm thinkpad t30 Battery http://www.topbattery.com.au/laptop-ac-adapter/acer/5520.htm Acer 5520 Adapter http://www.topbattery.com.au/laptop-ac-adapter/acer/5920.htm Acer 5920 Adapter http://www.topbattery.com.au/hp/pavilion-dv9700.htm HP pavilion dv9700 Battery http://www.topbattery.com.au/hp/pavilion-dv9500.htm HP pavilion dv9500 Battery http://www.topbattery.com.au/hp/zt1000.htm Hp zt1000 Battery http://www.topbattery.com.au/hp/zt3000.htm Hp zt3000 Battery http://www.topbattery.com.au/ibm/02k6928.htm Ibm 02k6928 Battery http://www.topbattery.com.au/ibm/02k7055.htm Ibm 02k7055 Battery http://www.topbattery.com.au/ibm/02k7072.htm Ibm 02k7072 Battery http://www.topbattery.com.au/ibm/thinkpad-r40.htm Ibm thinkpad r40 Battery http://www.topbattery.com.au/gateway/8msb.htm Gateway 8msb Battery http://www.topbattery.com.au/gateway/8msbg.htm Gateway 8msbg Battery http://www.topbattery.com.au/laptop-ac-adapter/dell/1000.htm Dell 1000 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/1150.htm Dell 1150 Adapter http://www.topbattery.com.au/laptop-ac-adapter/dell/1200.htm Dell 1200 Adapter http://www.topbattery.com.au/acer/aspire-2420-series.htm Acer aspire 2420 series Battery http://www.topbattery.com.au/acer/aspire-3600.htm Acer aspire 3600 Battery http://www.topbattery.com.au/acer/aspire-3610.htm Acer aspire 3610 Battery http://www.topbattery.com.au/acer/aspire-3680.htm Acer aspire 3680 Battery http://www.topbattery.com.au/acer/aspire-5050.htm Acer aspire 5050 Battery http://www.topbattery.com.au/acer/aspire-5100-series.htm Acer aspire 5100 series Battery http://www.topbattery.com.au/acer/aspire-5550.htm Acer aspire 5550 Battery http://www.topbattery.com.au/acer/aspire-5580.htm Acer aspire 5580 Battery http://www.topbattery.com.au/acer/btp-arj1.htm Acer btp-arj1 Battery http://www.topbattery.com.au/acer/lcbtp03003.htm Acer lcbtp03003 Battery http://www.topbattery.com.au/acer/squ-401.htm Acer squ-401 Battery http://www.topbattery.com.au/acer/btp-63d1.htm Acer btp-63d1 Battery http://www.topbattery.com.au/acer/travelmate-290.htm Acer travelmate 290 Battery http://www.topbattery.com.au/acer/travelmate-291.htm Acer travelmate 291 Battery http://www.topbattery.com.au/acer/travelmate-29x.htm Acer travelmate 29x Battery http://www.topbattery.com.au/acer/travelmate-3260.htm Acer travelmate 3260 Battery http://www.topbattery.com.au/laptop-ac-adapter/liteon/presario-1200.htm Liteon presario 1200 Adapter http://www.topbattery.com.au/laptop-ac-adapter/liteon/presario-1600.htm Liteon presario 1600 Adapter http://www.topbattery.com.au/laptop-ac-adapter/liteon/presario-1700.htm Liteon presario 1700 Adapter http://www.topbattery.com.au/laptop-ac-adapter/liteon/presario-1800.htm Liteon presario 1800 Adapter

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s