Windows AD: Is loopback processing absolutely necessary in order to apply a user policy to users logging into computers in the OU?

Posted by Brett on Server Fault See other posts from Server Fault or by Brett
Published on 2013-07-03T07:38:39Z Indexed on 2013/07/03 11:07 UTC
Read the original article Hit count: 224

I've had our AD setup running on server 2008r2 and now 2012, and I swear, a user policy applied to an OU containing only computers actually does apply to users logging into those computers, without loopback processing enabled. Everything I read seems to say that is not how it should work, but it does. Is this normal behavior?

Just tested again - created a policy with a drive map (which is a user policy), applied it to an OU containing my terminal server, forced a gpupdate, logged out/in, and sure enough, the drive is mapped. I did NOT turn on loopback processing.

© Server Fault or respective owner

Related posts about Windows

Related posts about active-directory