Hello All,

Just a quick check on this.  My company has a few logon as a service rights granted locally.  If I set logon as a service at Domain or OU level for additional accounts will these policies MERGE with the local account.  My thinking was that if the same account exists nothing will change - but a new account will be added?

I have got confused over this but know that policies apply local>site>domain>OU>OU etc - and that conflicting policies are overwritten by the last applied.  In the case of log on as a service - is that the WHOLE policy or the individual accounts?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

None of the settings in "User Rights Assignments" are cumulative.
if you configure them in a domain GPO and apply the GPO to a computer, the computer will have exactly what's configured in the domain GPO in his own settings, nothing more and nothing less.
Any local settings formerly configured will be ignored.
In other words: NO MERGE. What you configure in the domain GPO is what you get on the client.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BYRONJACKSONAuthor Commented:
Thank you that makes sense now :-)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.