You need to give User1 administrative rights so that he can manage Group Policies for the Security OU
You need to ensure that the users from the Engineering global group are able to access the Run command on the Start menu