MCSE: Windows Server 2003 Active Directory and Network Infrastructure Design Study Guide (70-297)

The option that allows domain controllers within a site to cache the universal group membership of users in that site so that a Global Catalog server is not necessary.

Group Policy settings that limit what actions a user can perform on their workstation or control the applications that are allowed to run.