if settings changes are made by
a) Domain Group Policy
or
b) local GPedit Group Policy
or
c) Registry edit
and not by a GUI setting in Windows, then the setting will say it is "set by Administrator" (like Domain Admin and Group Policy)
Baffled me for a while, especially before I got more comfy with Group Policy at work.