Install Windows Server and Windows as a host at VMware.
Create OU’s ( HR,IT ) and create 2 users at HR-OU
Join machine to domain - Install Group policy and create some polices
for users :-
1- Remove clock from taskbar
2- Deny all external storage
3- Lock task manager
4- Remove properties from computer icon
context menu
5- Create password policy
6- Create HR_App_URL at desktop