Lol, we do it via GPO too. Didn't want to get into that in this discussion though, since that usually only applies to a corporate network of some kind. I was trying to make a point that usuing a selfie becomes a lot of management work, uneccessarily.
-- The best admins, are the laziest. 