Loopback issue

[jellorain]

AD structure setup to include location OU which contains both users and computer OUs. We have a need to apply user configuration settings to a specified list of computers within the computers container. GPO applied to location OU with loopback (merge) settings, user config and workstation group filter. Need to remove the Authentication users from filter list, else all users in this location OU will receive the setting, rather than isolating the settings to only the users that login to the specified machines. It seems that since I cannot add any user authentication to the filtering, the GPO result is denied for the user.... though I'm under the impression that the loopback feature would simply recognize that any user who logs into the machines in the filter list would get the user config, authentication applied by the workstation group. Anyone have thoughts or workaround ideas?

[scottzaiss]

The last sentence is a little confusing. But this is what I see from the first half. The GPO with the user settings as well as the loopback setting need to be set on the OU that the computers in question are in, not the location OU. Right now you state that they are in the Computers container and GPO's cannot be assigned to a container. You will need to create a new OU for the computers that these setting will apply and link the GPOs and set loopback there. This way ANY user from any OU, if they are logging into one of these computers will get those user settings. And they will ONLY apply when logging into those specific computers. No filtering is necessary.

I hope this makes sense.

Scott