How do I use group/local policy to only allow IE to run on standalone workstation without disabling the Admin account also…