What can GPOs accomplish,
An Active Directory object that contains group policy settings (a set of group policies) for a site, domain, OU, or local computer. Each GPO has a unique name and globally unique identifier (GUID). When Active Directory is installed, one local GPO is created for every Windows Server 2008 server. A server can also be governed by Active Directory GPOs for sites, domains, and OUs.