Using Security Template Settings
Security templates offer seven categories of security settings. You use each category to apply specific computer-based security settings. The categories of security settings follow:
Account Policies Define password policies, account lockout policies, and Kerberos policies
Account policy settings applied at the OU level affect the local Security Accounts Manager (SAM) databases but not the user accounts in Active Directory. The account policies for domain accounts can be configured only at the domain-level Group Policy.
Local Policies Define audit policy, user rights assignment, and security option settings ...