Hi Tony
Without loopback turned on, the Computer Configuration portion of a GPO
applies to computer objects in the OU heirarchy it's linked to. Likewise,
the User Configuration portion of a GPO applies to user objects in the OU
heirarchy it's linked to. If you configure User Configuration settings in
a GPO and link it to an OU structure that only contains computers, nothing
will happen.
Loopback policy allows User Configuration settings to apply to a computer
instead of a user. As you've no doubt discovered, you can replace the
settings that would normally apply to a user account or merge them with
the policy settings coming from GPO's linked to the OU heirarchy in which
the user accounts reside.
Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)
Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no
rights.
Tony said:
Why do I have to enable the loopback policy in order for computers in my
OU to get the GPO?
Without that checked, the comnputers will not get login scripts etc..