...
This short-term fix will revert to the previous behavior (before when deny rights were set for DEPT-Services).
Link one of the following GPO GPOs to the appropriate OU: XXXXXXXXXXXXXXXXXXXX
Once group policy is updated on the client side, this will revert to denying logins only for Domain Guests. Service accounts will not be denied local or remote desktop logins.
...