none
Loopback Question

    Question

  • We have several hundred shared machines in our environment.  These machines can be used by 1-10 people throughout the day.   We'd like to enable loopback processing.  we have tested it in our lab but that is only for a few users.  If we enable this site wide for hundreds of machines will it impact our login times?   our end users are super sensitive to slow logins so even if it took 5-7 seconds longer we'd hear screaming and yelling.



    mqh7

    Monday, December 12, 2016 2:49 PM

All replies

  • Am 12.12.2016 um 15:49 schrieb mqh7:
    > We'd like to enable loopback processing.
     
    Think about MS16-072 as an alternativ.
    Since this patch, GPOs can only be applied to user, if the compuer
    account is allowed to read the user GPOs.
     
    Instead of using Auth.Users or DomainComputers READ, you can build a
    specific target secgroup of all computers, where the usersettings should
    apply.
     
    > we have tested it in our lab but that is only for a few users.  If we
    > enable this site wide for hundreds of machines will it impact our
    > login times?
     
    possibly. because usually it´s a 2 step job, with loop, you create 3 steps.
     
    2 Steps:
    - computer process SOM of computer GPOs
    - user process SOM of user GPOs
     
    3 steps with Loop:
    - user process SOM of computers GPOs.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, December 12, 2016 3:44 PM
  • Thanks. I read up on this GPO update.   I did not find anything that explicitly said "MS16-072 will break Loopback Processing"     Is that what you are telling me?   

    I just want to have my facts straight when I talk to my coworkers and management.  Thank you.  


    mqh7

    Monday, December 12, 2016 4:13 PM
  • Am 12.12.2016 um 17:13 schrieb mqh7:
    > I did not find anything that
    > explicitly said "MS16-072 will break Loopback Processing"     Is that
    > what you are telling me?
     
    No. I tell you, that MS16-072 is another option, to apply specific user
    settings depending on the machine, you are logging in.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, December 12, 2016 5:24 PM