Machine Loop Back Policy problem

[2097]

OK im having the following

 

I want to enable The Machine loopback Policy Option using the Mode 'Merge' .

 

Ive used this before at a different school to enable me to run Printer Scripts .

basically the last time i used this i assigned each Room a OU and i could apply the different printer scripts per Computer Ou .

 

The problem is when i have enabled this Policy on this server , Computers are not getting user policys such as the proxy server and the start menu items from the computers ' All users' folder is not loading ?

 

Any one experience this before ? or am i overlooking something

[Cmd.exe]

Yes I'm having the same problem. Have setup my 2008 policies pretty much as they were in 2003 including the merged loopback. And its not working.

 

Have you run GPresult to see what is being applied to the machine - wierdly my policy isn't even listed (either as applied or not) which makes me blame loopback.

 

Any help would be much appreciated also!

[2097]

having not setup this server from scratch i dont really know whats stopping this , im going to dive a bit deeper.

 

i have a printer script which can do it from pc name , but would rather do it my way which is via loopback

[2097]

it could be that i already have it enabled in a policy i overlooked

[MYK-IT]

This is the same method i use to map printers to our Windows XP Clients on a Windows 2003 Domain. I use a Windows 7 Client to manage the GPO (GPP) and setup a central store on the 2003 Domain and it works fine.

 

Basically, create an OU for the Computers to reside in, create a GPO for that OU:

 

Computer Configuration: Enabled

Administrative

Policies

Administrative Templates

Computer Configuration: Enabled

System/Group

Policy: User Group Policy loopback processing mode

Setting: Enabled

Mode: Merge

 

User Configuration: Enabled

Control Panel Settings

Printers

 

I usually setup to delete all networked printers first and then connect each printer required (in Replace Mode - Remove this item when it is no longer applied)

 

You also require Group Policy Preference Client Side Extensions for Windows XP (KB943729)for any Windows XP Clients.

[2097]

This is the same method i use to map printers to our Windows XP Clients on a Windows 2003 Domain. I use a Windows 7 Client to manage the GPO (GPP) and setup a central store on the 2003 Domain and it works fine.

 

Basically, create an OU for the Computers to reside in, create a GPO for that OU:

 

Computer Configuration: Enabled

Administrative

Policies

Administrative Templates

Computer Configuration: Enabled

System/Group

Policy: User Group Policy loopback processing mode

Setting: Enabled

Mode: Merge

 

User Configuration: Enabled

Control Panel Settings

Printers

 

I usually setup to delete all networked printers first and then connect each printer required (in Replace Mode - Remove this item when it is no longer applied)

 

You also require Group Policy Preference Client Side Extensions for Windows XP (KB943729)for any Windows XP Clients.

 

Thanks , that's exactly how i do it

Do you apply the loopback policy to each room OU , or to the Main OU .. for e.g. i have Computers OU > then rooms under it i.e. Room9 etc

 

not sure if (KB943729) applys to me as im using server 2003?

[2097]

OK heres my output

 

COMPUTER SETTINGS

 

Applied Group Policy Objects

-----------------------------

Printers LDS

PCGPO

shutdownatron

Default Domain

Default Domain Policy

WSUS - Global

 

 

 

USER POLICYS

The following GPOs were not applied because they were filtered out

-------------------------------------------------------------------

Local Group Policy

Filtering: Not Applied (Empty)

 

Default Domain

Filtering: Not Applied (Empty)

 

Map Student Area

Filtering: Not Applied (Empty)

 

WSUS - Global

Filtering: Not Applied (Empty)

 

shutdownatron

Filtering: Not Applied (Empty)

 

WSUS - Global

Filtering: Not Applied (Empty)

 

AudacityR15

Filtering: Denied (Security)

 

Local Group Policy

Filtering: Not Applied (Empty)

 

None of the Above are empty , there just not applying with loopback enabled ?

[MYK-IT]

The GPO(GPP) is applied to the OU that the actual computer account resides within (if you are creating individual GPOs for each and every computer / classroom room)

 

KB943729 is for installation on any Windows XP clients you may have.

[2097]

umm this is a very confusing problem , as soon as i remove loop back .. all the other policy's start working

[MYK-IT]

Are you 100% certain that the printer specific GPO (GPP) you've created does not contain any other settings?

 

Check.

 

Create a new blank GPO and only enable Merge Loopback settings and just one printer to start with, and link the GPO(GPP) to the OU that contains the computer account you are using / testing on.

[2097]

Just checked

 

My OU structure = SCHOOl > Computers > Room

 

Under this Room i have 32 machines

 

i have 2 policys under this room

 

1.) a Logon.vbs which maps all printers

 

2.) Another seperate policy called enabled loopback which is basically loopback enabled in Merge mode

 

 

I can remove the Printer logon.vbs and it makes no difference , the Enabled loopback policy still stops everything ( user GPO related) from working inside that room

[2097]

Thanks MYK for your Help

 

I basically created a OU outside the COmputers OU and put 1 machine in it , so it was only applied the settings in the Student OU and Loopback and printers and it worked perfect , so it was basically an exisiting script that was under Computers

 

so went through and removed them , and rewrote in the correct places .

 

Now all seems well and working