From here:
http://www.microsoft.com/technet/security/prodtech/windowsxp/adprtect.mspx#EDHAC
The GP item is under Computer Configuration, Administrative Templates, Windows Components, Security Center.
Apparently, updates to both server and client PCs have to be quite current.