Defining your GPOs and security groups