9.3. Using Group Policy for Security
As discussed in Chapter 8, "Configuring Group Policy Objects," a very useful and powerful feature of Active Directory is a technology known as a Group Policy. Through the use of Group Policy settings, systems administrators can assign literally hundreds of different settings and options for users, groups, and OUs. Specifically, in relation to security, you can use many different options to control how important features such as password policies, user rights, and account lockout settings can be configured.
The general process for making these settings is to create a Group Policy object (GPO) with the settings that you want, and to then link it to an OU or other Active Directory object.
Table 9.2 lists many ...