1
00:00:00,420 --> 00:00:08,160
By default a user settings come from GP shows that are scoped to the user object in a radius regardless

2
00:00:08,160 --> 00:00:16,050
of which computers are user assigns him to the resultant set of policies that determine the user's environment

3
00:00:16,140 --> 00:00:17,130
is the same.

4
00:00:17,130 --> 00:00:22,950
There are situations however in which you might want to configure some different group policy settings

5
00:00:23,220 --> 00:00:27,920
that affect a user depending on the computer that he or she uses.

6
00:00:27,930 --> 00:00:35,100
For example you might want to standardize and lock user desktops When users sign into computers and

7
00:00:35,100 --> 00:00:42,360
closely manage environments such as conference rooms or reception areas laboratories classrooms and

8
00:00:42,360 --> 00:00:43,260
kiosks.

9
00:00:43,260 --> 00:00:49,830
This is also in fact important for virtual desktop infrastructure scenarios including a remote virtual

10
00:00:49,830 --> 00:00:52,680
machines and remote desktop services.

11
00:00:52,680 --> 00:00:59,070
Imagine a scenario in which you want to enforce a standard corporate appearance for Windows based desktops

12
00:00:59,220 --> 00:01:04,650
on all the computers in conference rooms and other public areas of office.

13
00:01:04,650 --> 00:01:09,530
How will you manage this configuration centrally by using group policy.

14
00:01:09,630 --> 00:01:16,800
Policy settings that configure desktop appearance are located in the user configuration node in a GPO.

15
00:01:16,890 --> 00:01:24,350
Therefore by default the sentence applied to users regardless of which computer they sign in to default

16
00:01:24,360 --> 00:01:31,920
policy process and does not give you a way to scope user settings to apply to computers regardless of

17
00:01:31,920 --> 00:01:33,890
which user signs them.

18
00:01:33,930 --> 00:01:40,620
Let us have a look back policy process and can be used look back policy process and alert the default

19
00:01:40,740 --> 00:01:48,810
algorithm that the group policy client service uses to obtain the ordered list of GOP rules that should

20
00:01:48,810 --> 00:01:51,460
be applied to a user's configuration.

21
00:01:51,480 --> 00:02:00,240
Normally the user configuration node of the GP use scope to the user object determines the user configuration

22
00:02:00,450 --> 00:02:07,200
when you neighbor look back policy processing it is a user configuration note of the GPO scope to the

23
00:02:07,200 --> 00:02:14,280
computer object that determines the user configuration similar to all policy settings in the administrative

24
00:02:14,280 --> 00:02:22,380
templates section of a GPO let configure a user group policy loop back process and mode policies certain

25
00:02:22,620 --> 00:02:29,610
that is located in the computer configuration backslash policies backslash administrative templates

26
00:02:29,880 --> 00:02:37,350
backslash system and group policy folder in the group policy management Ed window so it can be set to

27
00:02:37,350 --> 00:02:41,310
not configured enabled or disabled when enabled.

28
00:02:41,320 --> 00:02:49,230
The policy can specify the replace or merge mode replace this mode replaces the GPO list for the user

29
00:02:49,380 --> 00:02:56,550
entirely by the GPO list already obtained for the computer at computer startup the settings in the user

30
00:02:56,550 --> 00:03:03,930
configuration note of the computer's GPO was applied to the user the replace mode is useful in a situation

31
00:03:03,930 --> 00:03:10,800
such as a classroom where users should receive a standard configuration rather than the configuration

32
00:03:11,070 --> 00:03:19,410
applied to those users in a less managed environment merge mode this mode advanced to the GPO list obtained

33
00:03:19,410 --> 00:03:27,060
for the computer at computer start up to the GPO list obtained for the user when sign any default the

34
00:03:27,060 --> 00:03:34,320
GPO list obtained for the computer apply later settings in the GP always on the computer's list have

35
00:03:34,410 --> 00:03:41,010
residents if they conflict with certain cell the users list this motor is useful for applying additional

36
00:03:41,010 --> 00:03:44,100
settings to user of typical configurations.

37
00:03:44,100 --> 00:03:50,520
For example you might allow a user to receive the typical configuration when signed into a computer

38
00:03:50,520 --> 00:03:58,200
in a conference room or reception area but replace the wallpaper with a standard picture and disable

39
00:03:58,200 --> 00:04:00,850
the use of certain applications or devices.

40
00:04:00,900 --> 00:04:07,470
Please note that when you combine look back processing with security group filtering the application

41
00:04:07,470 --> 00:04:14,010
of user settings the urine policy refresh uses the computer's credentials to determine which of the

42
00:04:14,050 --> 00:04:19,170
policies of the GP chose to apply as part of the logbook process.

43
00:04:19,320 --> 00:04:26,730
However the assigned end user also must have the apply group policy permission for the GPO to be applied

44
00:04:26,730 --> 00:04:27,790
successfully.

45
00:04:27,790 --> 00:04:35,190
Also they'll look back process and flag is configured on a call session basis rather than for GPO.