Quickly, there is a HUGE difference between a GPO and a GROUP or a USER. You have used these terms interchangeably, and they aren't really interchangeable. You would create your group, delegate responsibilities, add users and finally, group them in an OU with an apporpriate GPO linked to it...