1
00:00:03,070 --> 00:00:03,580
Okay.

2
00:00:03,610 --> 00:00:08,500
Now let's kind of walk through what it looks like to create a policy with loopback enabled.

3
00:00:09,470 --> 00:00:10,940
So I've got a GPO.

4
00:00:11,090 --> 00:00:13,100
I call it the kiosk GPO.

5
00:00:14,000 --> 00:00:16,130
And I'm going to go ahead and edit it.

6
00:00:17,110 --> 00:00:23,170
And if I come in under computer configuration policies, admin templates and system group policy.

7
00:00:24,100 --> 00:00:29,830
And what you'll see is if I come down here to configure user group policy loopback processing mode.

8
00:00:30,800 --> 00:00:35,750
What I'll do is go ahead and enable this and I can choose from merge or replace mode.

9
00:00:36,710 --> 00:00:37,790
For my scenario.

10
00:00:37,790 --> 00:00:41,630
Just as an example, I'm going to go ahead and use replace mode.

11
00:00:42,560 --> 00:00:46,970
And now I've got this policy being applied at an o u I've called kiosks.

12
00:00:47,970 --> 00:00:48,990
And in the kiosk.

13
00:00:48,990 --> 00:00:53,430
So you you'll see I have a Windows seven or Windows ten client machine.

14
00:00:54,420 --> 00:00:58,590
I might have multiple machines in here or even RDC servers.

15
00:00:59,570 --> 00:01:02,870
I typically and I'll talk about this in a little bit.

16
00:01:03,830 --> 00:01:06,890
But I typically recommend segregating those.

17
00:01:07,860 --> 00:01:13,380
Kind of special use loop back machines into their own IOU because it makes it a lot easier to manage

18
00:01:13,380 --> 00:01:13,800
those.

19
00:01:14,740 --> 00:01:19,750
And now, now that I've got my kiosk, GPO and its enabling loopback policy.

20
00:01:20,680 --> 00:01:24,070
And oh, by the way, you don't need to have loopback policy.

21
00:01:24,070 --> 00:01:28,150
The actual setting that I just said set on any more than one GPO.

22
00:01:29,070 --> 00:01:33,510
So if you might have multiple GPOs linked to this kiosk so you.

23
00:01:34,400 --> 00:01:37,640
But you don't have to have loopback enabled on all of them.

24
00:01:38,560 --> 00:01:44,170
That setting only needs to be processed once by the computer in order to get loop back policy.

25
00:01:45,160 --> 00:01:48,820
So as long as it's enabled on this one GPL, then I'm good.

26
00:01:49,820 --> 00:01:56,830
For you know, any other GPOs that I want to link up to the so you so I can either there's a couple

27
00:01:56,830 --> 00:02:01,460
of ways I can approach this and I'll talk a little more about these scenarios in a bit.

28
00:02:02,410 --> 00:02:08,830
But I can either create my user settings inside this kiosk GPO, or I can create separate GPOs.

29
00:02:09,820 --> 00:02:12,280
That set those user settings as well.

30
00:02:13,270 --> 00:02:19,030
So I could have for example, I'm going to go ahead and create and link a new GPO that we can call it

31
00:02:19,030 --> 00:02:20,530
kiosk user settings.

32
00:02:21,480 --> 00:02:26,370
And then here is where I'll set whatever settings I want on the user configuration side.

33
00:02:27,340 --> 00:02:31,330
That I want to apply to users that log into these kiosk machines.

34
00:02:32,340 --> 00:02:37,260
So strictly on this side of the GPO, I can then start setting settings.

35
00:02:38,230 --> 00:02:39,700
Like Lock the taskbar.

36
00:02:39,730 --> 00:02:42,100
Various lockdowns that I want to perform.

37
00:02:42,280 --> 00:02:43,900
I can do that on this kiosk.

38
00:02:43,900 --> 00:02:45,580
User settings GPO.

39
00:02:46,420 --> 00:02:52,180
And that guarantees that when a user logs into this Win7 client machine that they're going to get.

40
00:02:53,170 --> 00:02:54,790
Because we're in replace mode.

41
00:02:54,820 --> 00:02:59,940
They're going to get the settings that I specified here instead of their normal settings from whatever

42
00:03:00,070 --> 00:03:01,780
you they happen to be in normally.