none
If there is a setting in AD for a user object and also a setting in group policy, which takes precedence?

    Question

  • Hi,

    In particular, there are "session" settings for the remote desktop services that can be set for the individual user on their "user" object in AD.  But these were inconsistent from user to user so I wanted to set this via group policy.  Just to check, do the group policy settings take precedence over the AD User object settings?

    Thanks,

    Albert

    Thursday, May 21, 2015 6:00 PM

Answers

  • Hi,

    In particular, there are "session" settings for the remote desktop services that can be set for the individual user on their "user" object in AD.  But these were inconsistent from user to user so I wanted to set this via group policy.  Just to check, do the group policy settings take precedence over the AD User object settings?

    Thanks,

    Albert

    The GPO settings should take precedence according to the documentation for 2008 R2. Haven't seen anything about 2012/2012 R2.
    You should also be able to configure local session settings on each server to override AD user settings.

    https://technet.microsoft.com/en-us/library/cc731296.aspx

    Thursday, May 21, 2015 9:20 PM