Teacher's Group Policies under wirless

[BooBoo]

Hi folks, I need your help and advice for the following.

I will be moving the teachers laptops from the Admin domain to our Curriculum any day but I can't get the policies correct. I am happy with what I have before we introduce the wireless element. Fairly quick logons, different wallpapers (Teachers have one type pupils have another) and secure. Users also bring down a set start menu for the installed apps, different menus for the different user groups on the domain.

Here is the problem - I would like the teachers to be able to see their own start menu and desktop for the laptops but revert back to 'my' settings when on a desktop machine in an ict suite. Local logon accounts isn't a road I would like to go down and my budget doesn't exist anymore so I can't afford to purchase anything else. I tried loopback but It hasn't made any difference. GP’s are set at the User and Computer level laptop/desktop and both Computer and User Configuration have been enabled on both OU’s.

Your help on this matter would be greatly received. :?

[Ric_]

Loopback is what you need for this but, as you have found, it can be a little temperamental. When testing, make sure you wipe the locally cached profile and run gpupdate after each policy change.

You will also find that some wireless cards are tricky to set up to connect to the domain before logon. I've found that the Intel ProSET tool for the 2200BG chipset is the best at making this work and you can even export the configuration to a EXE for setup on other machines.

[BooBoo]

Ric_ I've tried the those suggestions already (It can be a pain waiting each time for it to update but I've got to try) Do you know at which OU I should be applying the loopback?

As for the cards I'm using Cisco Aironet 802.11a/b/g with the latest driver set. ( It also has an export facility) Authentication is done through LEAP to a Cisco Wireless Solution Engine Express.

[Ric_]

The loopback should be applied to the GPO which is doing the settings. Make sure that your other settings are not configured to override these.
Also check that the laptops are definately connected before login - a quick ping should suffice for this.

[BooBoo]

The wireless authenticates first before passing forward the Domain credentials fpr authentication.

What should I do if the settings controlling the start menus etc are on the users OU? I can't apply loop back in this instance as it would effect the desktops as well.

[Ric_]

OK... didn't explain myself well.

You need a GPO on the OU containing your laptops. We shall call this Laptop GPO.

Set up all the user settings within Laptop GPO and then set the loopback up on Laptop GPO.

IIRC any settings that are configured in Laptop GPO will override settings higher up as long as 'do not allow override' is not set above.

Personally, I have never had any luck with loopback and am probably not the best bod to ask. You want to ask someone like ChrisH

[BooBoo]

"Since when does logging off involve pressing the reset button!?!"

On a different note. A few years ago I had to upgrade all of the nics so at the same time pulled the reset cable from the mobo. The kids didn't like that!

[ChrisH]

I try and avoid loopback at all costs. It seems to work better on some settings than others but if possible avoid!

[BooBoo]

So if not loopback, any thoughts?

[ChrisH]

Sorry revised my post see above.

Edit again

Sorry i read your post properly this time will have a think about it

[BooBoo]

OK Sounds good. I'm not after freebies but if you could point me in the right direction I'll try and work it out from there. Scripts aren't my best subject.

[ChrisH]

Just to confirm you do have your machine accounts in their own OU as suggested is Ric's last post and that the laptops in question are in their own OU/sub OU?

[BooBoo]

The quick answer is yes. See below for more detail
Manager Users -
Staff -
Teaching
Support
Pupils
-
Upper
Lower
Managed Desktops -
Area 1
Area 2 etc...
Managed Laptops
Staff
Pupil

[ChrisH]

What are you setting it to in the loopback policy?

[BooBoo]

LAPTOP USERS GPO
System/Group Policyhide
Policy Setting
User Group Policy loopback processing mode Enabled
Mode: Replace