It will work, but those computer accounts will have to have rights to the GPO as well. In addition to them being in their own OU, you'll want to put them in a security group and add that group to the filtering section as well. Jamie Nelson | Infrastructure Consultant | BI&T Operations | Devon Energy | Work: 405.552.8054 | http://www.dvn.com <http://www.dvn.com/> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Kevin Gay Sent: Monday, June 30, 2008 3:26 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Applying user settings to a computer. Now I've got a somewhat convoluted problem. I have these special kiosk machines in their own OU and they have a domain user service account, this account is secured. My issue is I need to apply some settings to a certain security group if they log onto these machines, however these settings can only be for these machines, not their normal work computers. Can I apply user settings to the OU containing the machines and then filter it to the security group and turn on loopback processing and this work? I'm thinking through it and believe that the loopback wouldn't take effect because its looping back on the user via the computer, so if the computer can apply the loopback gpo then any user that logs in will get those settings as it's the computer looking at the GPO not the user. Ideas? Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.