I am getting ready to deploy a new Citrix farm and want to have a locked down Citrix environment using AD GPOs. However I also have a large number of fat Win2k and XP clients. How do I setup the GPOs so that they only apply when a user logs into Citrix. Do I use the "Loopback" GPO object and if so can someone give me a little info on how the loopback works? Thanks for any advice / suggestions. Matthew Shrewsbury Network Administrator