In cases where domain member systems cannot reach the DC, enforcing settings via registry to ensure that GPO processing doesn't affect these systems.