The Run command gpedit.msc carries a unique distinction in the Windows ecosystem: it is the hallmark of the "Pro" user.
The Local Group Policy Editor is an administrative tool, not a security boundary. While you can lock down a PC extensively (disable Command Prompt, hide drives, block registry editing), a user with physical access to the machine can boot from a USB drive or reset the PC. local group policy editor run command
This exports a detailed HTML report showing every applied policy, its winning state, and which GPO (in this case, Local) set it. The Run command gpedit
Always create a System Restore point before making major changes in the Policy Editor. Since these settings are "deep" in the OS, a wrong move can make Windows behave unexpectedly. block registry editing)