help with loopback gp verses ad group

Hi all,
I started out using gp's with windows 2000 and now have 2003 gp's.
I converted my old gp's to 2003.
I started out very basic.
I have one domain and one gp.
gp name = restricted users
under restricted users I have set user policies and also computer policies.
restricted users gp applies to all domain users
Now I am wanting to get a little more advanced with gp's.
Can someone explain to me the gp tree I should have in order to used loopback.
Should I break out my computer polices in a seperate gp and break out my
user policies in a seperate gp?
What I am trying to accomplish is having one computer that does not get a
manadtory screensaver regardless of who logs on.
I don't know how to setup a gp just for the one computer. how do I specify
that one computer? Is it by computer name and where would I do this?
Does it have something to do with a group in active directory?
Sure need some help on this. The more I read about loopback the more I get
confused.
Should I just create a new gp with only the screensaver policy not
configured and then create a group in active directory and add just the one
computer.
Then apply the group to that new screensaver gp?
1. gp=screensaver disabled
2. group in active directory= screensaver disabled
group member=ComputerX
3. change security filter to only=screensaver disabled group
4. link to restricted gp
--or this the hard way to do it?
Thanks for any help clarifying the ou structure. I did not want to get into
having alot of gp's. I prefer having one main one.
Sher
.