You need to ensure that User2 is assigned the same user rights as User1 on all of the client computers in OU1
You need to ensure that you can modify the Security settings of Group1 by using Active Directory Users and Computers