• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 105
  • Last Modified:

GPO Presecedance Order ?

I have a SQL 2012 GPO policy that has a couple of groups to allow 'Logon as a Service'.  I created another GPO, that was also configured to let a user account (service account) to 'Logon as a service'.  When I ran a GPUPDATE /FORCE I could not see the new GPO had been applied to the local securtity policy to allow a user account to logon as a service.  Therefore I changed the precedance order and I can now see the user account but the GPO for SQL 2012 accounts had gone from the Local Security policy to 'Logon as a service'.

How can I have 2 GPOs that allow certain accounts logon as a service without overwriting each other ?
0
CaussyR
Asked:
CaussyR
1 Solution
 
Joseph MoodyBlogger and wearer of all hats.Commented:
It really depends on the settings. Some are cumulative. Some are not.

For this scenario, your best bet is to scope your second GPO to only the objects needing the setting. Then add both user accounts into the GPO for the logon as a service.
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now