GPOs are great. They are the heart of Active Directory. One of the things I like about GPOs is their ability to expand and include new settings. For a GPO to expand an ADM file has to be built-this file will include the new settings. Microsoft released the a document on the subject.