Group Policy should be a no-brainer for organizations running Microsoft Active Directory. It lets IT control changes and a variety of settings for all users and computers in AD from a central console.
On a standalone computer, you normally use the Local Group Policy Editor, but on networked or AD computers you use Group Policy Management Editor. This post is not about the Missing Group Policy ...