Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains useraccounts and computer accounts.
A Group Policy object (GPO) named GP1 is linked to the domain. GP1 contains Computer Configuration
settings and User Configuration settings.
You need to prevent the User Configuration settingsin GP1 from being App1ied to users. The solution must
ensure that the Computer Configuration settings in GP1 are App1ied to all client computers.
What should you configure?
A.
The Group Policy loopback processing mode
B.
The Enforced setting
C.
The Block Inheritance feature
D.
The GPO Status
Explanation:
A: Group Policy loopback with replace option needs to be used B: Blocking inheritance prevents Group Policy
objects (GPOs) that are linked to higher sites, domains, ororganizational units from being automatically
inherited by the child-level C: Enforced prevent blocking at lower level
D: The GPO Status. This indicates whether either the user configuration or computer configuration of the
GPOis enabled or disabled.
You can use the Group Policy loopback feature to App1y Group Policy Objects (GPOs) that depend only
onwhich computer the user logs on to.
User Group Policy loopback processing can be enabled in one of two modes: merge or replace. In mergemode,
both GPOs App1ying to the user account and GPOs App1ying to the computer account are processedwhen a
user logs in. GPOs that App1y to the computer account are processed second and therefore takeprecedence if
a setting is defined in both the GPO(s) App1ying tothe user account, and the GPO(s) App1yingto the computer
account, the setting in the GPO(s) App1ying to the computer account will be enforced. With thereplace mode,
GPOs App1ying to the user account are not processedonly the GPOs App1ying to thecomputer account are
App1ied.
Loopback can be set to Not Configured, Enabled, or Disabled. In the Enabled state, loopback can be set
toMerge or Replace. In either case the user only receives user-related policy settings.
Loopback with Replace–In the case of Loopback withReplace, the GPO list for the user is replaced in
itsentirety by the GPO list that is already obtained for the computer at computer startup (during step2 in
GroupPolicy processing and precedence). The User Configuration settings from this list are App1ied to the
user.
Loopback with Merge–In the case of Loopback with Merge, the Group Policy object list is a concatenation.
The default list of GPOs for the user object is obtained, as normal, but then the list of GPOs for thecomputer
(obtained during computer startup) is appended to this list. Because the computer’s GPOs are processed
afterthe user’s GPOs, they have precedence if any of the settings conflict.
This is a COMPUTER setting, which is found under Computer Configuration |
Administrative Templates |
System | Group Policy | User Group Policy Loopback Processing Mode You want to create a new OU in AD that
is dedicated to computer accounts that will have loopbackprocessing enabled.
Create a new GPO in your new OU to enable User Group Policy Loopback Processing and set theappropriate
mode (merge / replace).
You will define the user settings you want to App1yto the loopback-enabled PCs via GPOs in this same
newOU. You can define these settings either in the same GPO where you enabled the User Group
PolicyLoopback Processing setting, or you create another new GPO in the same OU for your user settings.
Remember that when using the REPLACE mode, none of your other user GPOs will be App1ied whena user
logs in to a machine that has loopback processing enabled. ONLY the user settings that aredefined in the
GPOs that App1y to that machine will be App1ied.
http://msmvps.com/blogs/cgross/archive/2009/10/12/group-policy-loopback- processing.aspx
http://technet.microsoft.com/en-us/library/cc782810(v=ws.10).aspx http://technet.microsoft.com/en-us/library/
cc731076.aspx http://technet.microsoft.com/en-us/library/cc753909.aspx http://technet.microsoft.com/en-us/
library/cc778238%28v=ws.10%29.aspx http://technet.microsoft.com/en-us/magazine/dd673616.aspx