Chapter 5: Implementing Group Policy

Chapter 5

Implementing Group Policy

One of the most powerful and useful security features in Microsoft Windows 2000 is Group Policy. Group Policy enables administrators to manage large numbers of users and computers running Windows 2000 and Windows XP centrally, in the Active Directory directory service. Unlike system policies in Windows NT, group policies do not make permanent changes, or tattoo the registry rather, computers can easily have policies added or removed. Group policies also differ from system policies in that they are applied dynamically. Furthermore, nearly all Group Policy settings are applied without requiring a reboot of the operating system.