Server 2016 - Identity: Defining Group Policy Objects