Solved

GPO Presecedance Order ?

Posted on 2015-02-12
1
96 Views
Last Modified: 2015-02-15
I have a SQL 2012 GPO policy that has a couple of groups to allow 'Logon as a Service'.  I created another GPO, that was also configured to let a user account (service account) to 'Logon as a service'.  When I ran a GPUPDATE /FORCE I could not see the new GPO had been applied to the local securtity policy to allow a user account to logon as a service.  Therefore I changed the precedance order and I can now see the user account but the GPO for SQL 2012 accounts had gone from the Local Security policy to 'Logon as a service'.

How can I have 2 GPOs that allow certain accounts logon as a service without overwriting each other ?
0
Comment
Question by:CaussyR
1 Comment
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 500 total points
ID: 40605479
It really depends on the settings. Some are cumulative. Some are not.

For this scenario, your best bet is to scope your second GPO to only the objects needing the setting. Then add both user accounts into the GPO for the logon as a service.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now