good link to local policies. naturally, if you are domain, you will be tweaking domain cntrl policies.
http://www.microsoft.com/technet/Sec.../w2kadm10.mspx