GPO Loopback for Teachers and Students Laptop

[silverhand]

Dear mates,

 

After doing some research, I realized that I may need to apply loopback GPO for our school in able to apply security GPO for teachers and students.

 

In our AD, we got Students Netbook, Teachers Netbook as well as Teachers User, and Students Users; all of them are OU.

 

I just would like to ask if we need to apply loopback GPO in all of those four OU in purpose to apply different settings for teachers and students. It would be nice if you guys can help me clear that point. Please have a look my pictures. If I enable loopback in Staffnotebooks and Teachers; will they work as loopback GPO? Cheers,

 

 

 

Thank you in advance for your help,

 

Regards,

[Stuart_C]

Using the Loopback applies user settings to a PC. So any User Policies will only affect users in that OU. Applying a loopback on the PC's will mean that all the PC's in that OU will receive the user settings you have specified regardless of which OU their user account is in.

 

You may run into trouble, depending on what you are trying to achieve, if there are conflicting entries in a users GP and a PC's (loopback) GP.

[dennylutz]

Silverhand,

Can you elaborate more on what you are trying to do ? You said you want to "apply different settings for teachers and students" , are you refering to computer settings or user settings ?

 

As Stuart said, GPO loopback processing can be trickly and very hard to troubleshoot when things go sideways so we dont usually recommand it. Have you looked into Group Policy Filtering ? Group Policy filtering allows you to apply GPO based on AD group instead of AD OUs. You can simply apply the GPO a secuirty group where all your teachers belong to.