GPO Presecedance Order ?

Posted on 2015-02-12
Medium Priority
Last Modified: 2015-02-15
I have a SQL 2012 GPO policy that has a couple of groups to allow 'Logon as a Service'.  I created another GPO, that was also configured to let a user account (service account) to 'Logon as a service'.  When I ran a GPUPDATE /FORCE I could not see the new GPO had been applied to the local securtity policy to allow a user account to logon as a service.  Therefore I changed the precedance order and I can now see the user account but the GPO for SQL 2012 accounts had gone from the Local Security policy to 'Logon as a service'.

How can I have 2 GPOs that allow certain accounts logon as a service without overwriting each other ?
Question by:CaussyR
1 Comment
LVL 22

Accepted Solution

Joseph Moody earned 2000 total points
ID: 40605479
It really depends on the settings. Some are cumulative. Some are not.

For this scenario, your best bet is to scope your second GPO to only the objects needing the setting. Then add both user accounts into the GPO for the logon as a service.

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Dropbox has a relatively new feature called Smart Sync.  This feature allows Dropbox Professional (not plus) and Dropbox Business (if enabled) users to store information in Dropbox WITHOUT storing any files on their computer.
I was recently poking around with LibreOffice and figured out how easy it is to add great vector clip art to one's own LibreOffice gallery collection.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question