I don't know for certain, but I would venture a guess and say that once the computer recieves the policy it is processed by the local system account.