the network you manage has a dozen windows workstations. you want to ensure that users do not have the ability to change the boot order so that they can't boot to an unauthorized device. which step should you take?