Security Settings Extension Technical Reference
In an Active Directory directory service environment, you can use the Security Settings snap-in to modify the security policy assigned to a Group Policy object that is linked to an organizational unit, domain, or site. The Security Settings snap-in is an extension of the Group Policy Object Editor Microsoft Management Console (MMC) snap-in. You can use the Security Settings snap-in from any computer that is joined to a domain. On a local computer, you can use the Local Security Policy snap-in to modify account and local policies, public key policies, and IP security policies.
In this subject