It's been a while since I've used 4.0, so this may not compeltely apply, but the general info should be the same.
Have you determined how to create the groups you need and to add people to them?
After you have created the groups, the group template (properties) should have an option for "IT Policy" that you can set the policy for that entire group.
|