5 tweaks in a Microsoft Active Directory

 Discuss 5 tweaks you can do in a Microsoft Active Directory domain group policy to enhance an enterprise defense-in-depth (DiD) strategy.  For each tweak, show how to set the policy object, what control it enforces/enhances, and describe how it enhances the DiD strategy.