1.Under AD Users and Computers, right click on the newly created OU, click Properties.
2. Under Properties Window, click Group Policy Tab, click New.
3. Enter the name of your New Policy.
4. Click Edit to configure your policy.
5. Group Policy Editor will open .
6. You can choose to configure anything, for this example we will prohibit the access to the Control Panel.
7. By enabling the access and clicking OK. You have created your first policy.