Hello,
There is a GPO with folder redirection setup in our environment, obviously it targets users. However I have one server where I do not want the folder redirection to occur on... for any user logging into this one server, no folder redirection should apply. The server I must disable folder redirection on resides in a lower level OU than where the folder redirection policy is linked, however I can't just block inheritance, because I need the other inherited GPO's to apply.
I've seen two general options for handling this while researching:
1. There is not one simple 'disable' setting for redirection to put in another GPO linked to the lower level GPO so it overrides the higher level setting... however I could set the folder redirection policy to 'redirect to the local userprofile location', essentially switching the setting back to use local? Is that what that setting is intended for?
2. The other approach I've seen is to use the group policy 'configure user Group Policy loopback processing mode'. However, the example I saw said you would need to use mode 'replace', which would prevent the other settings from other GPO's from applying, which I can't do... If set to 'merge', maybe that would work? The article I saw said merge would not work because the setting would be overwritten, however I'm seeing conflicting information to that point in the description of the 'configure user Group Policy loopback processing mode' description within GPMC... it says the computer settings would take precedence... which is it?
So those are the two approaches I'm considering, any input would be appreciated. Also, to confirm my understanding of the GP loopback processing setting, by 'loopback', they are referring to the fact that in normal GPO processing, the local computers's user/computer settings are first in the sequence, follow by GPO's in the site, domain, OU's and child OUs, with the last in the sequence taking precedence.. but if 'loopback' is enabled, processing loops back and does the local computer's user/computers settings again therefore making those local settings take highest precedence.. is that correct? If it is, I think using this method method set to 'merge' is the right choice for my scenario.