I agree totally. I only mentioned it because it is the best way to truly make the system secure and most high volume multiple location chains operate this way. However they also have sophisticated IT that has custom made a GP usually driven by a custom booted front loader they control.
It is not very hard for someone that’s experienced with it and it is a good method or route. I simply mentioned it because it is available and it does work very well. It would be worth investing some time into understanding it if you want the ultimate control of your system especially if you plan on operating a multiple site setup.
Highly recommend you look at this if you are remotely interested. Group policy is very much worth the time studying if you ever want a true SambaPOS kiosk that you don’t have to worry about.