Useful to ad-hoc target an AD GPO at an object without needing to use an AD group, which requires a user logout or a computer restart for the policy to apply.