We have some W2k3 member servers in our W2k domain. We have a gpo that sets the log on as service option. This propagates to the W2k3 servers and we are unable to modify this setting in the local policy of the W2k3 server to add a local account to the option. Is this normal for W2k3? or can we extend the schema to allow this option? Thanks.