Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

GPO Presecedance Order ?

Posted on 2015-02-12
1
Medium Priority
?
104 Views
Last Modified: 2015-02-15
I have a SQL 2012 GPO policy that has a couple of groups to allow 'Logon as a Service'.  I created another GPO, that was also configured to let a user account (service account) to 'Logon as a service'.  When I ran a GPUPDATE /FORCE I could not see the new GPO had been applied to the local securtity policy to allow a user account to logon as a service.  Therefore I changed the precedance order and I can now see the user account but the GPO for SQL 2012 accounts had gone from the Local Security policy to 'Logon as a service'.

How can I have 2 GPOs that allow certain accounts logon as a service without overwriting each other ?
0
Comment
Question by:CaussyR
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 2000 total points
ID: 40605479
It really depends on the settings. Some are cumulative. Some are not.

For this scenario, your best bet is to scope your second GPO to only the objects needing the setting. Then add both user accounts into the GPO for the logon as a service.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
Know the reasons and solutions to move/import EDB to New Exchange Server. Also, find out how to recover an Exchange .edb file and to restore the file back.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question