Just a quick check on this. My company has a few logon as a service rights granted locally. If I set logon as a service at Domain or OU level for additional accounts will these policies MERGE with the local account. My thinking was that if the same account exists nothing will change - but a new account will be added?
I have got confused over this but know that policies apply local>site>domain>OU>OU etc - and that conflicting policies are overwritten by the last applied. In the case of log on as a service - is that the WHOLE policy or the individual accounts?