Of course, this downside can be mitigated by properly planning your GPO links and security scopes.Р”Р„re there any special permissions with loopback? Because loopback was also enabled, the computer also processed the logon script. When we first started using loopback in our environment, we had our domain logon scripts linked to the domainРІР‚В¦ When a user logged in, they would process the logon script. Second, loopback will slow down Group Policy processing. This will make troubleshooting more difficult if a problem ever crops up. First, loopback increases the complexity of Group Policy processing. If you plan to use loopback a good bit, you might want to create a general РІР‚СљEnable: Loopback Policy ProcessingРІР‚Сњ GPO and link it to the computers needing it. For example, I might have a GPO named РІР‚СљLoopback: IE SettingsРІР‚Сњ. To make troubleshooting easier, I will also prefix the GPO name with Loopback. If youР’В willР’В onlyР’В needР’В loopback within a few GPOs, enable the setting within that GPO only. Any user side settings linked to a computer will apply on the next GPUpdate. If you create a GPO named РІР‚СљEnable: Loopback Policy ProcessingРІР‚Сњ and link it toР’В your domain, every computer in your domain is РІР‚Сљloopback enabledРІР‚Сњ. This isР’В common point of confusion with loopback. Is this setting a per GPO kind of thing or a per computer kind of thing?

Building on that, any GPO using loopback will also apply on that very same GPUpdate. When you enable loopback in a GPO, it will take effect on the very next GPUpdate. This is a policy (registry) based CSE.Р’В Most settings under Administrative Templates do not require a reboot to take effect. When you enable loopback, youРІР‚в„ўll enable it under Administrative Templates. Replace mode will prevent the userРІР‚в„ўs normal RSOP from being applied. When you have a kiosk machine (such as a terminal), you generally do not want any user side settings as they might interfere with the kiosk. In any case that IРІР‚в„ўve seen, replace mode is used for kiosk machines. Loopback policy processing in replace mode as a more specific role. For example, you might have a printer in a lab that needs to be the default printer for every user in the lab.Р’В You will need to use loopback in merge mode for situations like this. When loopback is set to merge mode, user side settings that are linked to computer objects are interwoven with the userРІР‚в„ўs normal RSOP.Р’В ThisР’В mode is great when you have user side settings but you donРІР‚в„ўt know where your user will log in. Loopback policy processing has two modes: merge and replace. WhatРІР‚в„ўs the difference between merge and replace? So without further ado, your Loopback Policy Processing questions РІР‚вЂњ answered! Why do I have to make loopback sound so creepy?.

Are there any special permissions with loopback?.Is this setting a per GPO kind of thing or a per computer kind of thing?.WhatРІР‚в„ўs the difference between merge and replace?.Our last article about Loopback Policy Processing probably left you with some questions unanswered.

Gpo loopback processing