Microsoft® Windows® Security Resource Kit, Second Edition

Understanding Group Policy

Group policies have two types of application: those that apply to the computer, and those that apply to the user. Computer-related group policies are always applied, regardless of which user account is used to log on to the computer. The user-related group policies apply specifically to the user account that is used to log on to a computer. Security policies are applied to the computer and thus will apply to all users of the computer, including members of the Administrators group. By default, a local security policy, Setup security, captures the security settings applied to each computer running Windows 2000 and later at installation. You can implement Group Policy settings on a local computer, although local group ...