If you push out GPO's both via ZEN and AD, which one wins?

(long story, I'm just asking).