Machine administrators can set policy that excludes modification from the user level but not from the enterprise level.

• 计算机管理员可以设置策略防止在用户级别进行修改,但不能设置策略来防止在企业级别进行修改。