Group Policy Organizational Units Default Domain Policy windows server 2016
Policy: Administrative Templates | remove clock / remove properties
Password age , history, Complexity, duration, Lockout Settings
remove access to all removable access storage " cd / usb " Deny read and write
remove windows portable devices(WPD) " mobile " Deny read and write
Windows Settings Scripts | Logon/Logoff open calculator