Hi, I am wondering if a person could accomplish the same thing in Group policy and Active directory? if so, why and why not. thx