In large business networking environments, it is essential to maintain common user settings across a group of users and/or machines. Some of these settings could include setting disk quotas, restricting access to machine registries, or preventing system shutdown, and so on. It depends on the type of user, or all users, depending on the business policy for computer usage.
Group Policy Overview
To conceptually explain a group policy, think of a policy as a group of settings. Groups of policies are commonly referred to as Group Policy Objects, or GPOs. You could have one or several GPOs for users and computers on your network. In most situations, there will be more than one GPO because different user or computer groups usually need different restrictions or allowances. For example, you could have one GPO that sets some security settings globally for all users on your network, whereas another GPO could set Desktop restrictions, which would be applicable only to a particular user or computer group on your network. These GPOs would in effect be applied at the domain level, thus propagating and overriding any local machine policies on your network when a user who has these GPOs assigned to them logs into said machine.
In this article, you'll learn how to set up a GPO with software restriction and wireless network policies for a network operating with a Windows Server 2003 server as the primary domain controller.