A county IT team must lock down domain-joined workstations so local admin rights are removed for staff and idle screens auto-lock after a short timeout. Which OS security mechanism best enforces those settings consistently across the fleet?
Select an answer to reveal the explanation.
Short Explanation
Picture every county PC as a row of city hall desks that need the same lock and key rules. Group Policy is the central memo that pulls admin rights and forces the screen lock everywhere at once, instead of hoping each person tweaks their own machine.
Full Explanation
Group Policy (and related OS policy frameworks) push configuration baselines to domain-joined endpoints so local administrator rights and idle lock timeouts are enforced uniformly. Manual user checklists and consumer AV defaults do not provide reliable enterprise OS hardening. Reimaging into non-domain kiosk mode is unnecessary when policy can enforce the required controls.