You can also set security policy by using the secpol.msc snapin.

I didn't know that about the remote desktop. quite cool