Windows Server® 2012 Unleashed

Domain-Based Group Policies

Domain-based group polices differ significantly from local group policies because you must have an Active Directory environment to create and apply these policies. The settings within the group policies include both policy and preference nodes, which is another major difference (because the local group policies do not include preference settings). After that, however, most of the settings remain the same. Domain-based group policies allow for more flexibility when it comes to actually configuring what criteria is used to apply the policy. With domain-based policies, they can be filtered to apply to specific members of Active Directory security groups, computers, or objects on a particular subnet or stored within an ...