you can configure one or more group policy objects (gpos) and then use a process called linking to associate them with specific active directory domain services (ad ds) objects.