Except AD lets you do an awful lot more than this with Group Policy - you can configure and enforce endless amounts of settings on client machines from the simp

Except AD lets you do an awful lot more than this with Group Policy - you can configure and enforce endless amounts of settings on client machines from the simple - wallpaper for example - to software installs to executable restrictions... This is a big plus for locking down mostly untrusted users (eg average employees in a larger enterprise). Edited to fix stupid autocorrect.