https://guid.cam/zh-TW/tech/shasta/prevent-access-to-the-command-prompt-gpo/