Question: gpo has a lock icon?
Answer: The lock icon is a clue that the policy settings you are looking at are being set via domain policy, not local policy.