I understand that in general a user that is local admin has many ways to get around or prevent settings from being applied via GPO, if they wanted to do so. I just wanted to get that out because that ...