Editing Group Policy (section)

==Security==
Group Policy settings are enforced voluntarily by the targeted applications. In many cases, this merely consists of disabling the user interface for a particular function.<ref>[[Raymond Chen]], [https://devblogs.microsoft.com/oldnewthing/20080131-00/?p=23633 "Shell policy is not the same as security"]</ref>

Alternatively, a malevolent user can modify or interfere with the application so that it cannot successfully read its Group Policy settings, thus enforcing potentially lower security defaults or even returning arbitrary values.<ref>{{Cite web |url=https://techcommunity.microsoft.com/t5/windows-blog-archive/circumventing-group-policy-as-a-limited-user/ba-p/723472 |title=Circumventing Group Policy as a Limited User |last=Russinovich |first=Mark |date=2019-06-26 |orig-date=2005-12-12 |website=Microsoft Community Hub |publisher=Microsoft |access-date=2023-06-10 |quote=}}</ref>