The option that allows domain controllers within a site to cache the universal group membership of users in that site so that a Global Catalog server is not necessary.
user restrictions
Group Policy settings that limit what actions a user can perform on their workstation or control the applications that are allowed to run.