Allow/Deny Precedence

[GenJerDan]

Hopefully this is the correct forum for this. Is the order of precedence/evaluation in the Local Security Policy such that a blanket Deny can be overridden by an explicit Allow? Specifically, if (for instance) the policy is Deny logon of "Group A" will Allowing specific users members of that group override that policy, letting them log on?

We won't sit down. We won't shut up. We won't go quietly away. YouTube and My Mu[sic], Films and Windows Programs, etc.

[Marco Bertschi]

Order of GPO levels[^] Group Policy Priority? Which will be applied? - Spiceworks[^] Hope this helps, even though I'm late to the party :~

[CHill60]

Marco said:

even though I'm late to the party

You're the only one who turned up! :laugh:

[GenJerDan]

Thanks. The hard part now will be convincing the Powers That Be to fix things so I can do my job. :)

We won't sit down. We won't shut up. We won't go quietly away. YouTube and My Mu[sic], Films and Windows Programs, etc.