Ever wonder how to get access to restricted application or options in windows.
Here in this post I am going to explain the utility provided by microsoft for administrators to enforce restrictions easily.
the utility is called ‘gpedit.msc‘ means Group Policy Editor
what is Group Policy Editor?
The Group Policy Editor console is a graphical user interface(GUI) which allows admin to edit registry entries easily.Manually editing registry entries is advisable and sometimes it will cause some unexpected problems.The gpedit.msc tool makes the administration of registry easier
There is another utility called ‘secpol.msc‘ which is similar to group policy which is used to edit subgroups
How to run Group Policy?
go to run and type ‘gpedit.msc‘
Where all the information’s are stored?
All the information that is edited from group policy editor will affect registry editor directly.
The physical location of the modified files will resides in
%SystemRoot%\System32\GroupPolicy\
There are three folders to store information related to Admin, Machine and User related configurations
The Adm folder contains all the entries enforced on the system by the administrator and these entries directly maps to the windows registry
For example if you want to disable connection tab from internet Explorer you locate
Administrative Templates – Windows Component -> Internet Explorer -> Internet Control Panel
Click on ‘Disable the Connection page’
Click ‘Enable’ and then press ok.
Now if you open Internet Explorer you will not see the connection tab in the Internet options page from Tools menu
The above mentioned is a simple example of how and why group policy is used. You can explore more options yourself to enforce/restrict user access
To more on the options Group Policy Settings download the respective excel spreadsheet for your windows operating system
They point the finger at me.. again! 
This has actually sparked up an idea in my mind. This really is a superb weblog article.