GPO : Loopback Processing

In this tutorial, I will try to simply introduce you to how reminder loops work in GPOs.

It quickly becomes a joke when we have a mixed environment with local users, RDS users and mobile users.


To illustrate this article, I am going to assume that I have a company with two remote sites of about thirty kilometers and that the HR has a fixed position on each site and 3 days work on site A and 2 days on site B .

Each site has two servers:

  • An Active Directory
  • A file server with the folders replicated by using the DFS service.


When HR connects to a post, its documents and desktop redirected must point to the right server. If you apply the GPO at the user level, it will always point to the same server. Knowing that a user can not be present in more than one OU.


Before you start GPOs, your Active Directory should be organized in the following way or something similar. The computers on site A and B must be in different organizational units.

Arbo AD

To apply the document redirection to the right place we will put the strategy on the OU where the computers are.

The callback loop will allow us to apply the GPO user settings in one OR there are computers.

1 – Create a GPO with callback loop and the linked to both OR computers.

Computer Configuration \ Policies \ Administrative Templates \ System \ Group Policy
Configure User Group Policy Loopback Processing Mode: Enabled
Mode: Replace

Verify that the GPO applies first.

2 – It is now necessary to create the 2 GPO of redirections of the files and to attribute them to the OR.


With this configuration, HR will retrieve its Desktop and Document folders on site A and B from the local server.

This solution can also be applied for drives and printers.


Applying a callback loop allows you to apply user settings to an Organizational Unit that contains computers.

Reminder loops are used in the following cases:

  • Applications of user policies based on the post where the user logs on.
  • Applying user policies on RDS servers.

Alternative solutions:

  1. use vbs script and play on the registry.
  2. Enabling the namespace in DFS and pointing redirected folders to \\ mydomain.dom\profiles\…..

Related Posts

WSUS: Set up client-side targeting
Presentation The client-side targeting on WSUS, when enabled, allows you to directly assign to a group declare in the console. This declaration is not done GPO or by modifying the register of the customer workstation. %start_p_primary%Once activated,

GPO: Run a script when the computer starts
Presentation In this article, we will see how to set up a script that runs at startup of the post using Group Policy (GPO). The advantage of using this type of script is that it is executed with the Administrators rights, which makes it possible to l

Printer mapping: GPO and Script
When setting up an Active Directory, one of the things you want to set up automatically is the printer mapping to the different users. Before setting up GPOs, you must have shared your printers. As for mapping network drives, I'll introduce you to tw

Leave a Comment