The resultant set of policy (see: <a href="http://support.microsoft.com/kb/323276">http://support.microsoft.com/kb/323276</a>) and group policy management console (see: <a href="http://www.microsoft.com/windowsserver2003/gpmc/default.mspx">http://www.microsoft.com/windowsserver2003/gpmc/default.mspx</a>) allow you to do this quite nicely in Windows Server 2003 Active Directory. You can use the latter to manage a Windows 2000 environment as well but it must be installed on a Windows Server 2003 RTM domain controller and is already installed by default on Windows Server 2003 SP1 domain controllers.

The resultant set of policy (see: <a href="http://support.microsoft.com/kb/323276">http://support.microsoft.com/kb/323276</a>) and group policy management console (see: <a href="http://www.microsoft.com/windowsserver2003/gpmc/default.mspx">http://www.microsoft.com/windowsserver2003/gpmc/default.mspx</a>) allow you to do this quite nicely in Windows Server 2003 Active Directory. You can use the latter to manage a Windows 2000 environment as well but it must be installed on a Windows Server 2003 RTM domain controller and is already installed by default on Windows Server 2003 SP1 domain controllers.