1

I am quite confused regarding a gpo in our company, an OU is called Citrix_servers where only a bunch of windows citrix servers reside, and a gpo called Citrix_Policy is linked to this OU. However this gpo only has user configuration defined, and the GPO status is set to “Computer configuration settings disabled”, which also means loopback processing is not enabled. For some reasons, when I log into the the servers in this OU, and the user configuration settings in the Citrix_Policy are actually effective and applied to whoever is signed onto these servers. but how? loopback processing is not enabled, are the user configuration settings supposed to be applied to the users in this OU? since there is no user in this OU, how did it happen?

5 Spice ups
2

Well loopback doesn’t have to be applied in that specific GPO.

Have you checked Gpresult.

Loopback is either on or off it doesn’t have to be applied in the same GPO that applies the user settings.

2 Spice ups
3

I second the notion that loopback processing is set in a different GPO. That is what I do.

2 Spice ups
4

Don’t confuse the terms “User” and “Computer” with AD objects when dealing with GP. In this context, user refers to settings under HKCU and computer refers to HKLM settings.

5

thank you @jhart ​ and @kevinhsieh ​ I just checked on the same OU, multiple gpos are linked, loopback processing is enabled on the other linked gpo.