I'm creating a departmental share. This will be one single folder in the file share and within that folder there will be one folder per department. All users should be having access to the main folder and only to their assigned department subfolder. Active Directory already have the OU for users and below that each user department. All of this is in a W2K8 DC. The file share is a virtual box running W2K12 R2. I have created the folder and subfolders with departments. What should be best way to create and apply GPO for permissions, mapped drives, disk quota,etc?