I assigned user1 the right to logon as a service at the domain root. I didn't click any override options.
I have user2 assigned the same right on a Local Security Policy.
When user1 is assigned the right in the higher up policy, user2 is not assigned that right. But when I remove the user1 policy setting, user2 suddenly is assigned the desired user right.
Why is the policy at the root preventing the Local Policy from assigned the right to logon as a service for user2?
Thanks for any input.