On a Windows domain, per-user and per-computer settings can be deployed through this, attached to Active Directory Containers. This can be used to configure security settings such as password policy, account restrictions, firewall status, and so on.