Build a Domain Controller
If you do not have rights to create a GPO in Active Directory, or you do not use Active Directory, you can easily build one in a Virtual Machine.
Create a new Virtual Machine without External Network Access (you don't want to see your Production Network). You can add a Network Adapter with 'Internal' to access your PC if necessary

Install Windows Server 2016 Standard (Desktop Experience)

Take the Defaults
Select Windows Server 2016 Standard (Desktop Experience)

Rename Your Server

Choose a friendly name

Add Roles and Features

Add Active Directory Domain Services
Group Policy Management Feature should automatically be selected
Promote the server to a domain controller
Add a new forest and specify a Root domain name (make one up)
Set the DSRM password
Press Next on the next few screens
Press Install
A Restart will be required to complete the installation