Group Policy, in Active Directory, provides a granular way to provide access control for all aspects of local and network resources based on user account, group membership, computer name, etc. However, there are some things that Group Policy can't do by default. In those cases, you can use custom ADM files.
