If a virtual desktop were to be implemented, could I use group policy to ensure users on personal devices would be restricted from downloading information stored on 365 and placing it on their own flashdrives/storage devices?