I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I have 1 OU and some other leaf OU as user,groups,computers and servers. Under servers I have al my servers. Then the servers have just one gpo that is the domain policy. The servers have applied the domain gpo as it should be. But there is one that have only one group under the "log on as service" policy. If I run gpo result it show me that the server should have just one group and it look that it apply the policy correctly. But for my logic it should have two groups... what's happening ?