Active Directory Group Policy allows administrators to centrally manage desktop environments across an organization. Group Policy Objects can be used to configure settings for software installation, scripts, security policies, and more. Group Policies are applied based on where they are linked within Active Directory sites, domains, and organizational units.