Hello,
I've reviewed these:
http://blogs.technet.com/b/askds/archive/2013/02/08/circle-back-to-loopback.aspx
http://kudratsapaev.blogspot.com/2009/07/loopback-processing-of-group-policy.html
I need a few clarifications:
1. "Use the policy setting Configure
user Group Policy loopback processing mode to configure loopback in Windows 8 and Windows
Server 2012. Earlier
versions of Windows have the same policy setting under the name User Group Policy loopback
processing mode." -- OK, I'm using Windows 7 management machine, GPMC shows 'Configure user Group Policy loopback processing mode', not 'User Group Policy loopback processing mode.' I'm targeting a server 2008 R2 machine to enable loopback processing
on. Is this newer windows 8 and windows server 2012 setting going to work on server 2008 R2? I run the group policy results wizard for the machine and a test user and is says it applied that setting, however I'm not seeing everything I expected to see... which
could be for many other reasons, I know. But I would like to rule out the possibility of this particular setting 'Configure
user Group Policy loopback processing mode', NOT working on 2008 R2, should it work? or MUST it be the 'User
Group Policy loopback processing mode' setting, which I don't currently see available?
2. If loopback processing is enabled for a computer, all user settings from all GPO's applied to that computer will be applied, NOT just the settings in the same GPO that enables loopback processing, correct?
3. I'm enabling loopback processing for one machine. This machine is in an OU with other machines (let's just say I can't move it for the sake of this question). I create a GPO linked to this OU with only the 'computer' setting to enable loopback processing
configured and via security filtering I remove 'authenticated users' and add only the one computer account for which I want the setting to apply. This should be fine, correct? In other words, since loopback is going to make the logged on 'user' pickup 'user'
settings from GPO's applied to the 'computer' account now, the user accounts don't need access to this GPO that enabled loopback right? as long as they have read/apply permissions to all the other GPO's that have the actual 'user' settings? Loopback is a 'computer'
setting, and the computer account has read/apply.. that all that's needed, correct?
Thanks!