The administrator can set configuration policies for a given entity in two ways:
By assigning policy groups to the entity.
By modifying the current policies of the entity.
Policy groups are containers of policies that are identified by a unique name and can be assigned to any entities in either the organization or domain trees by creating a link to them in the Configuration Manager, which facilitates reusability of policies. They can be imported and exported for ease of maintenance.
An administrator can, for instance, create policies that contain settings suitable for "Novice" employees or "Domain Controller" hosts, store them in two policy groups and assign these policy groups to all the elements of either the organization or domain tree which corresponds to this description.