Break through group policy operation restrictions

When I was idle, I ran to my elder sister's company to access the Internet. When their supervisor was in a meeting, I sat down to her seat and watched a movie. A quiet movie won't cause any trouble, but after watching it for a while, my old sister will come and harass me.
"Old brother, some colleagues used computers to watch movies and play games. Is there a way for them to only use Word on my computer?
Yes! Click the Start Menu, click Run, and enter gpedit. msc. OK. Open the Group Policy,
In "user configuration", select "system" in "management module", find "run only allowed Windows Applications" in the window on the right, and double-click to open. Change "Not Configured" to "enabled", and click "show..." next to the list of applications allowed below ..." Button. In a single click, enter “winword.exe ". OK. Close the Group Policy and return to the desktop.
Check the effect! Double-click the player on the desktop. A warning is displayed!
The effect is good, and the old lady leaves with satisfaction. You have to take a close look at the film. Double-click the player icon on the table and a warning will pop up! If you forget to cancel the restriction, click the "Start" menu, click "run", enter "gpedit. msc", and click OK. When the warning starts again, I can't laugh any more.-No, I have to block my retreat?
I remember that in the security mode, the restrictions can be lifted, but I am not sure if I have tried it, but now I have to try it first. I'm about to restart my computer and switch to safe mode. Think of one thing.
"Elder sister, do you have a boot password for your supervisor's computer ?"
"Of course you have. It's a long time! Don't look at me. I don't know the password ."
Although I have N methods to clear the BIOS password, I know that none of the methods is suitable for me (MM: Not good yet, accompany me out for shopping! What's the problem? Download a BIOS password viewer online! I whispered: I can't use Internet Explorer. How can I use Word? Why can't I use Word to access the Internet? Why can't I use words on the side of MM! Facts have proved that the words of MM are always correct, and Word can indeed access the Internet, but I didn't know it at the time !)
I reluctantly looked back and finished! This is the supervisor's special plane. It will be quite troublesome to restore it to its original state before it finishes the meeting. In the future, you will not be able to access the Internet without having to worry about it. This will not affect your work. My first computer was fully sponsored by my elder sister. If I learned something, it would be too bad for me to get into trouble!
Wash your face with cold water and go back to the computer and sit down. Calm down, always feel a little hope! I quietly thought about the process of adding restrictions to the computer several times. I felt a little wrong, but I couldn't say it again. I decided to repeat the process and go to the old sister's camera step by step.
Haha, I finally found the problem! Right? What is Microsoft's restriction? That's a child! I completely forgot my frustration ).
According to Microsoft, If you enable this setting, you can only run the programs that you add to the "List of applications allowed to run, when we add a program to the Application List, we simply enter the name of the file that can run the program. Do you understand? That is to say, you can only run the program named "specified file name", rather than the specified program. Take this machine as an example. Can Word be run? Of course! What about other programs? Of course not. Can I change the file name of the program to winword.exe? Of course ...... Of course you can run it! To put it bluntly, any program named winword.exe can run! What are the limits? It is clearly a hacker.
The supervisor is about to finish the meeting. Switch to C: windowssystem32, change the mmc.exefile name to winword.exe, and double-click to open it. "File-> open" C: gpedit under WINDOWSsystem32. msc, select "system" in "management module" in "user configuration", find "run only allowed Windows Applications" in the window on the right, and double-click to open. Change "enabled" to "not configured". OK, it is done!
To sum up, Because Windows fails to strictly review the running program, the program can run directly by simple renaming. If you encounter such restrictions, do you know how to break through ?!