Managing Local Group Policies
As discussed in the section "GPO Types" in Chapter 2, Windows Vista, Windows Server 2008, and later versions of Windows allow the use of multiple Local Group Policy objects (LGPOs) on a single computer (as long as the computer is not a domain controller). Previously, computers had only one LGPO.
When computers are being used in a stand-alone configuration rather than a domain configuration, you may find that multiple LGPOs are useful because you no longer have to explicitly disable or remove settings that interfere with your ability to manage a computer before performing administrator tasks. Instead, you can implement one LGPO for administrators and another LGPO for nonadministrators.
When computers are being used in ...