There is a lot you can do because an object exists in a directory. In principal, any object in a directory can be given any attributes that you want to give it. Group Policy is taking more advantage of the capabilities that Active Directory has to offer.