Deploying PowerShell group policies
Group policies are groups of policies you can deploy that control a user or computer environment. The policies define what a given user can and cannot do on a given Windows computer. For example, you can create a Group Policy Object (GPO) to set policies that define what screen saver to use, allow the user to see the Control Panel, or specify a default PowerShell execution policy. There are over 2,500 individual settings that you can deploy.
After you create a GPO and specify the policies to deploy, you can apply it to any OU in your domain. An OU is a container object within AD that can contain both other OUs and leaf objects such as AD user, computer, or group objects. You use OUs to support both the deployment of GPOs and the delegation of AD administration.
You can apply a GPO to an OU, but also to the domain or to an AD site. Additionally, you can specify whether policies within a given GPO are to apply to users, computers, or both...