DisscussioN

   https://www.infoworld.com/article/3117286/windows-server/tutorial-the-joys-of-windows-servers-group-policies.html 

Password Policy
                -Enforce password history
                -Maximum password age
                -Minimum password age
                -Minimum password length
                -Password must meet complexity requirements

Disable USB Drives
                - All removable storage classes: Deny all access
                - All removable storage: Allow direct access in remote sessions

Disable PST file creation  (note: PSTs contain addresses from Outlook)
                - Prevent users from adding new content to existing PST files
                - Prevent users from adding PSTs to Outlook profiles
                - Prevent using sharing-exclusive PSTs 

Password Policy
                -Enforce password history
                -Maximum password age
                -Minimum password age
                -Minimum password length
                -Password must meet complexity requirements

Disable USB Drives
                - All removable storage classes: Deny all access
                - All removable storage: Allow direct access in remote sessions

Disable PST file creation  (note: PSTs contain addresses from Outlook)
                - Prevent users from adding new content to existing PST files
                - Prevent users from adding PSTs to Outlook profiles
                - Prevent using sharing-exclusive PSTs