Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

User Group Policy loopback processing mode changes in Windows Vista, Windows Server 2008, and later versions of Windows


View products that this article applies to.

INTRODUCTION

This article discusses processing changes for computers configured for User Group Policy Loopback processing mode in Windows Vista, Windows Server 2008 and later versions of Windows.

↑ Back to the top


More Information


When you configure a computer that is running a version of Windows that was released before Windows Vista and Server 2008, it was only necessary to ensure that Group Policy permissions are configured to allow user to read and apply the GPO containing user settings.

Starting in Windows Vista and Windows Server 2008, this behavior changed.

Consider the following scenarios:
  1. A computer that is running Windows Vista, Windows Server 2008, or later version of Windows is configured for User Group Policy Loopback processing in Merge mode.

    The Group Policy Service reads the Group Policy Object Information from the Active Directory in the security context of the machine. In this scenario, the computer account must have at least read permissions to the Group Policy object that contains the user settings, and a user should have at least Read and Apply permission in order to successfully apply the policy.
  2. A computer that is running Windows Vista, Windows Server 2008 or later version of Windows is configured for User Group Policy Loopback processing in Replace mode.

    In this case, the Group Policy service impersonates the user when reading Group Policy Object information from the Active Directory. Therefore, only the user needs access to the GPO. In order to successfully apply a policy, a user should have at least the Read and Apply permission.


↑ Back to the top


Keywords: kb, kbexpertiseinter, kbhowto, kbinfo

↑ Back to the top

Article Info
Article ID : 953768
Revision : 1
Created on : 1/7/2017
Published on : 2/20/2013
Exists online : False
Views : 202