Blocking the policy allows an attacker to retain older policy settings rather than being subject to any new ones the administrator had instituted.