We help IT Professionals succeed at work.

LOGON AS A SERVICE - MERGE WITH LOCAL POLICY

BYRONJACKSON
BYRONJACKSON asked
on
Hello All,

Just a quick check on this.  My company has a few logon as a service rights granted locally.  If I set logon as a service at Domain or OU level for additional accounts will these policies MERGE with the local account.  My thinking was that if the same account exists nothing will change - but a new account will be added?

I have got confused over this but know that policies apply local>site>domain>OU>OU etc - and that conflicting policies are overwritten by the last applied.  In the case of log on as a service - is that the WHOLE policy or the individual accounts?
Comment
Watch Question

Most Valuable Expert 2018
Distinguished Expert 2018
Commented:
None of the settings in "User Rights Assignments" are cumulative.
if you configure them in a domain GPO and apply the GPO to a computer, the computer will have exactly what's configured in the domain GPO in his own settings, nothing more and nothing less.
Any local settings formerly configured will be ignored.
In other words: NO MERGE. What you configure in the domain GPO is what you get on the client.

Author

Commented:
Thank you that makes sense now :-)