Group policies can be used to perform many different tasks in an infrastructure. Here, I have listed some of their capabilities:
- Group policies can be linked to sites, domains, and organization units. It allows you to match the Group Policy requirements with the Active Directory structure.
- Group policies allow you to use security filtering to target specific groups, users, or computers.
- WMI filters are capable of filtering the Active Directory objects based on criteria such as OS version, roles, system configuration, and so on. Group policies allow you to use WMI filters for targeting.
- The GPO status can change based on the operational requirements. If required, Group Policy can disable completely or disable user or computer settings individually.
- Group Policy management tasks can be delegated to individuals or groups.
- It can be used to install, redeploy...
