In this tutorial, I will try to simply introduce you to how reminder loops work in GPOs.
It quickly becomes a joke when we have a mixed environment with local users, RDS users and mobile users.
To illustrate this article, I am going to assume that I have a company with two remote sites of about thirty kilometers and that the HR has a fixed position on each site and 3 days work on site A and 2 days on site B .
Each site has two servers:
- An Active Directory
- A file server with the folders replicated by using the DFS service.
When HR connects to a post, its documents and desktop redirected must point to the right server. If you apply the GPO at the user level, it will always point to the same server. Knowing that a user can not be present in more than one OU.
Before you start GPOs, your Active Directory should be organized in the following way or something similar. The computers on site A and B must be in different organizational units.
To apply the document redirection to the right place we will put the strategy on the OU where the computers are.
The callback loop will allow us to apply the GPO user settings in one OR there are computers.
1 – Create a GPO with callback loop and the linked to both OR computers.
Computer Configuration \ Policies \ Administrative Templates \ System \ Group Policy
Configure User Group Policy Loopback Processing Mode: Enabled
Verify that the GPO applies first.
2 – It is now necessary to create the 2 GPO of redirections of the files and to attribute them to the OR.
With this configuration, HR will retrieve its Desktop and Document folders on site A and B from the local server.
This solution can also be applied for drives and printers.
Applying a callback loop allows you to apply user settings to an Organizational Unit that contains computers.
Reminder loops are used in the following cases:
- Applications of user policies based on the post where the user logs on.
- Applying user policies on RDS servers.
- use vbs script and play on the registry.
- Enabling the namespace in DFS and pointing redirected folders to \\ mydomain.dom\profiles\…..