require four GPO policies created on win 2012 r2 server, 30 users in 5 departments. need to lock down users including not allowing USB device usage. will require four different policies to be created. Also need permissions created for four different departments. most of that done already but need it checked.