You need to configure the Group Policy settings to ensure that the Azure Virtual Desktop session hosts meet the security requirements. What should…

In environments like Azure Virtual Desktop (AVD), it is crucial to apply a consistent set of user settings to anyone who logs onto a specific session host, regardless of where the user's account is located in Active Directory. The standard Group Policy processing applies user settings based on the user object's location.

Group Policy loopback processing changes this default behavior. When enabled on a GPO linked to an Organizational Unit (OU) containing computer objects (the AVD session hosts), it forces the system to also apply the User Configuration settings from GPOs associated with the computer. This ensures that the required security settings are applied to every user session on those hosts, fulfilling the security requirements.

A. security filtering for the link of GPO4: This restricts which computers or users the GPO applies to but does not alter the fundamental user policy processing behavior required for this scenario.

B. security filtering for the link of GPO1: This restricts which computers or users the GPO applies to but does not alter the fundamental user policy processing behavior required for this scenario.

D. the Enforced property for the link of GPO1: This prevents policy settings from being overridden by GPOs at a lower level in the AD hierarchy but does not change which user policies are applied.

E. loopback processing in GPO1: This would be incorrect if GPO1 is not the policy object linked to the OU containing the AVD session hosts where the setting is required.

F. the Enforced property for the link of GPO4: This prevents policy settings from being overridden by GPOs at a lower level in the AD hierarchy but does not change which user policies are applied.

1. Microsoft Learn. "Configure user Group Policy loopback processing mode." This document details the loopback processing feature. It states

"This setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting." This is the core mechanism needed for AVD session hosts. The setting is located at Computer Configuration\Policies\Administrative Templates\System\Group Policy.

2. Microsoft Learn. "Loopback processing of Group Policy." This article explains the two modes (Merge and Replace) and explicitly calls out its use for "Remote Desktop Session Host servers

" which is the technology underpinning AVD session hosts. It clarifies that loopback is designed for scenarios where user settings must be determined by the computer being used.

3. Microsoft Learn. "Recommended GPO settings for VDI desktops." In the section "User Group Policy loopback processing mode

" this performance tuning guide for VDI (a similar technology) recommends enabling loopback processing to ensure user experience and security settings are applied from the VDI host's GPO

not the user's.