Your network contains an Active Directory domain named contoso.com.
You deploy several servers that have the Remote Desktop Session Host role service installed.
You have two organizational units (OUs). The OUs are configured as shown in the following table.
GPO1 contains the Folder Redirection settings for all of the users.
You need to recommend a solution to prevent the sales users’ folders from being redirected
when the users log on to a Remote Desktop session.
What should you include in the recommendation?
A.
FromGPO2, set the loopback processing mode.
B.
From GPO1, set the loopback processing mode.
C.
Configure security filtering for GPO1.
D.
Apply a WMI filter to GPO2.
Explanation:
http://support.microsoft.com/kb/231287
I think answer is C.
Correct answer: A
Explanation:
Group Policy applies to the user or computer in a manner that depends on where both the user and the computer objects are located in Active Directory. However, in some cases, users may need policy applied to them based on the location of the computer object alone. You can use the Group Policy loopback feature to apply Group Policy Objects (GPOs) that depend only on which computer the user logs on to.
Confirmed fully here by MS:
“Why is this configuration important to me?
Use this configuration if you have users in your domain whose folders are redirected through policy, but you don’t want that redirect to occur when users log on through Terminal Services.
You need to enable this policy setting using the Replace mode on GPO linked to OU, where the Terminal Server’s computer accounts are (without folder redirection enabled). When users log on to Terminal Servers, the policy folder redirection is not applied. ”
http://social.technet.microsoft.com/wiki/contents/articles/2548.windows-server-understand-user-group-policy-loopback-processing-mode.aspx