nerdexam
Citrix

1Y0-401 · Question #16

Scenario: A Citrix Architect identifies a fault in the Active Directory design for CGE's existing XenApp environments. Group Policy Objects (GPOs) from OUs across the Active Directory apply when end…

The correct answer is A. Configure loopback processing with replace on a GPO linked to all OUs containing Virtual Desktop. To ensure full control over Group Policies applied to XenApp user sessions, the architect should implement loopback processing in "replace" mode. This setting must be configured within a GPO linked to the OUs containing the Virtual Desktop (XenApp) computers, ensuring only…

Design Access, Policies, and User Experience

Question

Scenario: A Citrix Architect identifies a fault in the Active Directory design for CGE's existing XenApp environments. Group Policy Objects (GPOs) from OUs across the Active Directory apply when end users log on to XenApp applications, creating undesirable end-user experiences. The architect determines that CGE needs full control over which GPOs apply in the new environment. How should the architect implement loopback processing to ensure full control over the Group Policies that are applied?

Options

  • AConfigure loopback processing with replace on a GPO linked to all OUs containing Virtual Desktop
  • BConfigure loopback processing with merge on a GPO linked to all OUs containing Virtual Desktop
  • CConfigure loopback processing with replace on a GPO linked to all OUs containing Delivery Controllers.
  • DConfigure loopback processing with merge on a GPO linked to all OUs containing Delivery Controllers.

How the community answered

(40 responses)
  • A
    65% (26)
  • B
    5% (2)
  • C
    10% (4)
  • D
    20% (8)

Why each option

To ensure full control over Group Policies applied to XenApp user sessions, the architect should implement loopback processing in "replace" mode. This setting must be configured within a GPO linked to the OUs containing the Virtual Desktop (XenApp) computers, ensuring only relevant policies are applied.

AConfigure loopback processing with replace on a GPO linked to all OUs containing Virtual DesktopCorrect

Configuring loopback processing with "replace" mode on a GPO linked to all OUs containing Virtual Desktop (XenApp server) computers ensures that user policies from the user's OU are ignored, and only user policies linked to the computer's OU path are applied. This provides full control over the policies affecting the XenApp user experience.

BConfigure loopback processing with merge on a GPO linked to all OUs containing Virtual Desktop

Configuring loopback processing with "merge" mode might still allow unwanted GPOs from the user's native OU to apply, failing to provide "full control" over policy application.

CConfigure loopback processing with replace on a GPO linked to all OUs containing Delivery Controllers.

Delivery Controllers are management servers and do not host user sessions, so applying loopback processing to their OUs would not affect the user experience on XenApp servers.

DConfigure loopback processing with merge on a GPO linked to all OUs containing Delivery Controllers.

Configuring loopback processing with "merge" mode and linking to Delivery Controller OUs is incorrect because "merge" does not provide full control and Delivery Controllers are not the targets for user policy application.

Concept tested: Group Policy loopback processing (replace mode) targeting

Source: https://learn.microsoft.com/en-us/troubleshoot/windows-server/group-policy/loopback-processing-of-group-policy

Topics

#Group Policy loopback processing#GPO replace mode#Virtual Desktop Agent#Active Directory GPO

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Y0-401 Practice