Although Group Policy is designed to work in a domain environment, you can actually use it to some extent in a workgroup environment also. That’s because each Windows 2000 or later machine has a Local Group Policy Object (LGPO) that you can use to lock down settings on that machine. And if you have admin privileges on every machine in your workgroup, you can configure the LGPOs for your machines remotely from a single machine instead of having to walk around to each of them and log on locally.
To configure the LGPO on a remote machine, open a new MMC console, add the Group Policy snap-in, and click Browse to set the focus to a different machine than the local computer.
