1. Open ADUC (Active Directory Users & Computers)
2. Right-click on the “Domain Name” and select New -> Organizational Unit (A new OU (Organizational Unit) will now be created under your Domain. You can give it any name you want)
3. Now, Right-click on the new OU you just created and select Properties
4. Click on the Group Policy Tab
5. Click on the New Button
6. Click on Edit (The Group Policy Object Editor MMC will now open)
You can now enable/disable any permission for the OU from here.