TABLE 1: Default GPO Capabilities
Policy Feature	Function
Computer Configuration (specific to computer objects)
Software Settings: Software Installation	Provides mechanism for assigning .msi application installation packages that the system applies to computer objects.
Windows Settings: Security Settings	Uses security configuration templates to deliver per-machine security configuration. Machine security settings include account policy, user rights policy, and auditing policy.
Windows Settings: Scripts (Startup/Shutdown)	Lets you define machine-based startup or shutdown scripts, such as simple batch files, executable files, or Windows Scripting Host (WSH) scripts. The script files reside in the GPT.
Administrative Templates	The system defines NT 4.0-style system policy settings here. Machine-specific administrative templates let you control HKEY_LOCAL_MACHINE Registry key settings.
User Configuration (specific to user objects)
Software Settings: Software installation	Provides mechanism for publishing or assigning .msi and .zap application installation packages that the system applies to user objects.
Windows Settings: Folder Redirection	Provides the ability to redirect common Windows Explorer shell folders such as Desktop, My Documents, and Startup to server-based folders.
Windows Settings: Security Settings	Lets you define IP Security and Public Key policy that the system applies to user objects.
Windows Settings: Remote Installation Service	Lets you define how the Remote Installation Service (RIS) will request information from users using RIS to install Win2K.
Windows Settings: Scripts Logon/Logoff	Lets you define logon and logoff scripts that the system applies to user objects.
Administrative Templates	The system defines NT 4.0-style system policy settings here. User-specific administrative templates let you control HKEY_CURRENT_USER Registry key settings.