none
Loopback order

    Question

  • The GPO with the lowest link order is processed last, and therefore has the highest precedence.

    So in my RDS server i have these 3 GPO:

    1. Loopback - replace

    2. RDSServer_usersettings

    3. RDSServer_computer

    The contents of the above don't matter.  I don't have a problem I'm just trying to understand better.

    With the above order my loopback is going to run last.  Dont i in fact need loopback set at 3 so it runs first, telling the other two GPO to process?

    thank you.

    Friday, March 6, 2015 10:51 AM

Answers

All replies

  • good question, 

    my logic 

    Is that the policies are applied and then once applied loopback re- evaluates the policies depending on your loopback mode. 

    So, the policies have to be processed before - otherwise loop-back doesn't know what to merge or replace. (i Maybe wrong but it works in my brain) 

    • Marked as answer by Willmeister Sunday, March 8, 2015 1:49 PM
    Friday, March 6, 2015 12:33 PM
  • thanks, that was my logic as well, but i'm unable to find anything that documents it.

    once i get my test machine up i guess i'll test swapping loopback from first to last and see...

    Friday, March 6, 2015 12:42 PM
  • > 1. Loopback - replace
     
    this is a computer setting
     
    > 2. RDSServer_usersettings
     
    these are user settings
     
    > 3. RDSServer_computer
     
    this again are computer settings.
     
    > With the above order my loopback is going to run last.  Dont i in fact
    > need loopback set at 3 so it runs first, telling the other two GPO to
    > process?
     
    Computer settings are processed at startup (before a user logs on), and
    loopback - despite being a computer setting - only affects the
    processing of user gpos.
     
    So the inheritance order of loopback really does not matter :)
     
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Marked as answer by Willmeister Sunday, March 8, 2015 1:49 PM
    Sunday, March 8, 2015 11:36 AM
  • The piece i wasn't considering, the computer start up...

    Server starts up, runs the computer configs, in the link order, it doesn't actually matter where the loopback is, as long as the loopback flag is set...

    ...so that when a user comes along and later logs in with that flag set, they get the appropriate policies.  in the case of loopback replace, none of their own users OU policies, just the user policies from the ou where that server resides.

    thanks guys!

    Sunday, March 8, 2015 1:53 PM