Group policies (Group Policy Objects, or GPOs) are a useful and powerful way to configure many (security) aspects of Windows Server 2012, particularly in a domain. Given the large number of possible settings, it is easy to accidentally set contradictory or incompatible settings or forget subject areas. A non-systematic approach in this regard will, at minimum, cause operational malfunctions that are sometimes difficult to remedy. In the worst case, severe vulnerabilities may arise on a server or connected client systems. In particular, improperly used inheritance rules and filters may result in GPOs not being applied to a system at all.