By default a user settings come from GP shows that are scoped to the user object in a radius regardless
of which computers are user assigns him to the resultant set of policies that determine the user's environment
is the same.
There are situations however in which you might want to configure some different group policy settings
that affect a user depending on the computer that he or she uses.
For example you might want to standardize and lock user desktops When users sign into computers and
closely manage environments such as conference rooms or reception areas laboratories classrooms and
kiosks.
This is also in fact important for virtual desktop infrastructure scenarios including a remote virtual
machines and remote desktop services.
Imagine a scenario in which you want to enforce a standard corporate appearance for Windows based desktops
on all the computers in conference rooms and other public areas of office.
How will you manage this configuration centrally by using group policy.
Policy settings that configure desktop appearance are located in the user configuration node in a GPO.
Therefore by default the sentence applied to users regardless of which computer they sign in to default
policy process and does not give you a way to scope user settings to apply to computers regardless of
which user signs them.
Let us have a look back policy process and can be used look back policy process and alert the default
algorithm that the group policy client service uses to obtain the ordered list of GOP rules that should
be applied to a user's configuration.
Normally the user configuration node of the GP use scope to the user object determines the user configuration
when you neighbor look back policy processing it is a user configuration note of the GPO scope to the
computer object that determines the user configuration similar to all policy settings in the administrative
templates section of a GPO let configure a user group policy loop back process and mode policies certain
that is located in the computer configuration backslash policies backslash administrative templates
backslash system and group policy folder in the group policy management Ed window so it can be set to
not configured enabled or disabled when enabled.
The policy can specify the replace or merge mode replace this mode replaces the GPO list for the user
entirely by the GPO list already obtained for the computer at computer startup the settings in the user
configuration note of the computer's GPO was applied to the user the replace mode is useful in a situation
such as a classroom where users should receive a standard configuration rather than the configuration
applied to those users in a less managed environment merge mode this mode advanced to the GPO list obtained
for the computer at computer start up to the GPO list obtained for the user when sign any default the
GPO list obtained for the computer apply later settings in the GP always on the computer's list have
residents if they conflict with certain cell the users list this motor is useful for applying additional
settings to user of typical configurations.
For example you might allow a user to receive the typical configuration when signed into a computer
in a conference room or reception area but replace the wallpaper with a standard picture and disable
the use of certain applications or devices.
Please note that when you combine look back processing with security group filtering the application
of user settings the urine policy refresh uses the computer's credentials to determine which of the
policies of the GP chose to apply as part of the logbook process.
However the assigned end user also must have the apply group policy permission for the GPO to be applied
successfully.
Also they'll look back process and flag is configured on a call session basis rather than for GPO.