Comment by brainfire

It's pretty basic Windows GPO knowledge. Lots of them work this way.