Group Policy exists in almost every modern business environment. Many organizations either do not use it or do not use it as extensively as they should. We all face problems with securing our environment, but most do not realize they have the perfect tool to lock down and protect their organization.
Do you understand Group Policy processing? Did you know you can manage both Active Directory groups and user rights? What about Logging, running Scheduled Tasks? Lastly, why do all your Administrative accounts have extra permissions like Debug Programs?
Remember, Group Policy is basically a larger Enterprise scale registry editor.