User Rights Assignment Local Policy

I have some servers that have some user rights assingmetns made in the local domain policy. However there is a User Rights Assignment that I want to set on all of my servers.

If I define some User Rights Assignements to a GPO, will it just add to the users listed in the local policy, or will it remove those users, leaving only the user defined in the GPO with the rights?
LVL 12
ryan80Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Vinchenzo-the-SecondCommented:
Your local policy will override it from the domain
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Brian PiercePhotographerCommented:
It will remove all those not listed in the GPO
0
Adam BrownSr Solutions ArchitectCommented:
Once you set a User Right Assignment with a GPO, the GPO takes precedence and the local policy setting is replaced. After that you are also unable to assign user rights for that particular right via local policy. Any right assigned with group policy has to include all of the users that need that right, and the system will write only the rights assignments listed in the last GPO processed that has the right assigned (Highest precedence in GPMC).
0
Ron MalmsteadInformation Services ManagerCommented:
Processing order for policy settingsGroup policies are processed in the following order:[4]
Order  -    LSDOU

1.Local Group Policy objects - This applies to any settings in the computer's local policy (accessed by running gpedit.msc). Previous to Windows Vista, there was only one local group policy stored per computer. There are now individual group policies settable per account of a Windows Vista and 7 machine.[5]
2.Site - Next the computer processes any group policies that are applied to the site the computer is currently in. If multiple policies are linked to a site these are processed in the order set by the administrator using the Linked Group Policy Objects tab, policies with the lowest link order are processed last and have the highest precedence.
3.Domain - Any policies applied at the domain level (default domain policy) are processed next. If multiple policies are linked to a domain these are processed in the order set by the administrator using the Linked Group Policy Objects tab, policies with the lowest link order are processed last and have the highest precedence.
4.Organizational Unit - Last group policies assigned to the organizational unit that contains the computer or user are processed. If multiple policies are linked to an organizational unit these are processed in the order set by the administrator using the Linked Group Policy Objects tab, policies with the lowest link order are processed last and have the highest precedence.
Inheritance - Inheritance can be blocked or enforced to control what policies are applied at each level. If a higher level administrator (enterprise administrator) creates a policy that has inheritance blocked by a lower level administrator (domain administrator) this policy will still be processed.
Where a Group Policy Preference Settings is configured and there is also an equivalent Group Policy Setting configured then the value of the Group Policy Setting will take precedence.


0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.