A tool for editing certain advanced settings within Windows. In versions prior to Vista these settings applied to all users on any single PC, but later versions allow configuration on a per-user basis.  Typical settings include enabling or disabling access to Windows features. The concept extends beyond the local PC to networks of computers running throughout an organisation, allowing such settings to be centrally managed.