Group policy effective setting

[MauriceN]

What is correct?

Default Domain policy gives user1, user2 log on as a service right.

OU1 has policy giving user3 and user4 log on as a service right.

Which users would be able to log in as a service on a server in the OU1 OU. There is not blocking and no override anywhere.

 

[marc91215]

1234

 

[MauriceN]

That is what I thought also, but only 3,4 are able to.

 

[mlichstein]

Uh, 1234 is not correct. GPOs are not merged. 34 is the expected behavior.

 

[MauriceN]

Ok! Now we are getting somewhere. Off to the test bench (again)

 

[ITPangaeaArchitect]

agreed, only 3 and 4 will apply.

the same settings are set in two policies...the OU policy becomes the authoritive and overwrites the settings in teh domain policy...you would have to set all 4 in teh OU policy and you'd be good to go.



-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there