Except AD lets you do an awful lot more than this with Group Policy - you can configure and enforce endless amounts of settings on client machines from the simple - wallpaper for example - to software installs to executable restrictions...

This is a big plus for locking down mostly untrusted users (eg average employees in a larger enterprise).

Edited to fix stupid autocorrect.