In a Windows domain, which construct is used to distribute per-user and per-computer security settings such as password policies and firewall status?

In a Windows domain, which construct is used to distribute per-user and per-computer security settings such as password policies and firewall status?

• A. Local security policy
• B. Group Policy Objects (GPOs)
• C. Active Directory
• D. Firewall rules

Answer: (B)

Group Policy Objects provide the central mechanism to apply security settings for users and computers across a Windows domain. They live in Active Directory and can be linked to sites, domains, or organizational units, so the same password policies and firewall configurations apply to all members within that scope. Within a GPO, User Configuration handles per-user settings and Computer Configuration handles per-computer settings. Password policies are defined under Account Policies in the Computer Configuration, while firewall behavior is controlled under Windows Security Settings. This setup lets administrators enforce a consistent security posture across many machines without configuring each one individually. Local security policy applies only to a single computer, and Active Directory is the directory service that stores objects rather than distributing policies by itself; firewall rules can be implemented via GPOs, but the construct that distributes and enforces these settings across the domain is the Group Policy Object.

Group Policy Objects provide the central mechanism to apply security settings for users and computers across a Windows domain. They live in Active Directory and can be linked to sites, domains, or organizational units, so the same password policies and firewall configurations apply to all members within that scope. Within a GPO, User Configuration handles per-user settings and Computer Configuration handles per-computer settings. Password policies are defined under Account Policies in the Computer Configuration, while firewall behavior is controlled under Windows Security Settings. This setup lets administrators enforce a consistent security posture across many machines without configuring each one individually. Local security policy applies only to a single computer, and Active Directory is the directory service that stores objects rather than distributing policies by itself; firewall rules can be implemented via GPOs, but the construct that distributes and enforces these settings across the domain is the Group Policy Object.