doesn't one of those control lists of who can access shared resources? Because I remember when editing one a while ago it said something about a list of people or computers that could access it, and I googled it out of curiosity and that's about how far I ever got with ever figuring that out.
Basically, yeah. It control's the rights and settings etc of the comptuters and users on the network.
I'm setting up Windows Deployment Services now, it'll be... "interesting" to say the least.