Deploying PowerShell Group Policies
AD supports group policies. Group policies are groups of policies you can deploy to control a user or computer environment. The policies define what a given user can and cannot do on a given Windows computer. For example, you can create a Group Policy Object (GPO) that defines what screen saver to use, allow the user to see the Control Panel, or specify a default PowerShell execution policy. There are over 2500 individual settings that you can deploy.
After you create a GPO and specify the policies to deploy, you can apply the GPO to an Organizational Unit (OU) in your domain (or to the domain as a whole to a specific AD site). An OU is a container object within the AD that can contain other OUs and leaf objects such as AD users, computers, or group objects. You use OUs to support the deployment of GPOs and delegation of AD administration.
GPOs provide considerable flexibility in restricting what users can do on a workstation or a server. You can apply...