Group Policy
Group Policy in Active Directory lets you centrally configure Windows user and computer settings using Group Policy Objects (GPOs). Link GPOs to sites, domains, and OUs; processing follows Local > Site > Domain > OU with inheritance, precedence, Enforced, and Block Inheritance controls.
