ARCHIVED: In Active Directory, what is GPO loopback processing?

Note: The following information is intended for registered local support providers (LSPs) at Indiana University. If you are an LSP and have questions regarding the information in this document, contact LSP Services at  lsps@iu.edu ; otherwise, contact your campus Support Center.

In Active Directory, Group Policy Object (GPO) loopback processing enables you to use a different set of user type group policies based on the computer that the user is logging into. This policy is useful when you need to have user type policies applied to users of specific computers, even if the user object is not in the same container as the computer.

To use loopback processing, follow these steps:

1. If it is not already installed, install the Group Policy Management Console with Service Pack 1 from this page: http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en
2. Click Start, then Programs or All Programs, then Administrative Tools, and then Group Policy Management.
   
   
3. Navigate to the organizational unit (OU) to which you wish to apply the group policy.
   
   
4. Right-click the OU and select Create and Link a GPO Here... to create a new GPO, or navigate to an already existing GPO.
   
   
5. Right-click the GPO and select Edit.
   
   
6. In the Group Policy snap-in, under "Computer Configuration", click Administrative Templates, click System, and then click Group Policy.
   
   
7. In the "Details" pane, double-click the User Group Policy loopback processing mode policy.
   
   
8. In the User Group Policy loopback processing mode dialog box, click Enabled.
   
   
9. In the drop-down box next to "Mode", select Merge, and click OK to exit the property page.

For more information regarding loopback processing, see article 231287 in Microsoft's knowledge base.

Search Microsoft Help and Support.

Comments/Questions/Corrections