add regedit that ignores GPO