Group policies can be used to perform many different tasks in an infrastructure. Here, I have listed some of their capabilities:

• Group policies can be linked to sites, domains, and organization units. It allows you to match the Group Policy requirements with the Active Directory structure.
• Group policies allow you to use security filtering to target specific groups, users, or computers.
• WMI filters are capable of filtering the Active Directory objects based on criteria such as OS version, roles, system configuration, and so on. Group policies allow you to use WMI filters for targeting.
• The GPO status can change based on the operational requirements. If required, Group Policy can disable completely or disable user or computer settings individually.
• Group Policy management tasks can be delegated to individuals or groups.
• It can be used to install, redeploy, or remove programs from computers.
• It can be used to publish scripts to be executed on computer start-up or to shut down a process.
• It can be used to deploy printers to computers.
• Group policies are capable of applying different security policies, such as password policies, lock-out policies, Kerberos policies, firewall policies, public key policies, and much more.
• It can be used to define system audit settings and enable/manage advanced system audit capabilities, which allows you to capture more data about the roles and their activities.
• Group Policy can be used to add registry keys to systems.
• Group policies can be used to define software restriction policies and application control policies to control the application behaviors in computer systems.
• It can be used to set up policy-based QoS rules to define Differentiated Services Code Point (DSCP) and throttle values for the outgoing network traffic. It will allow you to prioritize/manage network traffic in a system.
• Group Policy administrative templates can be used to define the registry-based policies' targeting system, applications, and service settings.
• Group Policy can be used to apply preference settings to computers and users. For example, it can be used to define mapped drives, printers, power options, Internet Explorer settings, regional settings, local users and groups, and so on.
• Using group policies, it is possible to manage end user roaming profile settings, including folder redirection. It will automatically save user data to a network location instead of a local computer. It allows you to access the same profile data from any workstation in the domain.