https://guid.cam/tech/shasta/prevent-access-to-the-command-prompt-gpo/