- The Windows 2008 domain policy is configured using the Group Policy Editor. The Group Policy Editor has several features allowing you to program the domain's security. For instance, if you want to disable Remote Desktop on all computers, you can disable it on all your computers from one location.
- Two types of policies exist: User settings and desktop settings. Desktop settings control the interface of your users' client computers. User settings control how the users can interact on the network and what resources they can access.
- A domain policy plan shows an outline of the security preferences on the network. It often takes several days or weeks to lay out the right plan for your network. The goal is to create a plan that protects the network, but does not inhibit users from accessing productivity files and programs.