We need to create the group with some of desktop. like one group with get USB access and another group will not get USB access. And manage this group at application layer.  we want to create group at this software level. 

Note: Currently , we are using group which is created at AD.