If several OUs in your domain contain accounts that need to be locked down almost (but not quite) the same way, create a GPO and link it to the first OU and then configure the settings in the GPO. Then use the Group Policy Management Console to make additional copies of the GPO with all its settings, link this GPOs to the other OUs, and change the few settings in them that need to be different for those OUs. This can save you a lot of time as you deploy your GPOs.
To copy a GPO, expand the Group Policy Objects node, right-click on any GPO and select Copy. Then right-click on the Group Policy Objects node and select Paste. In the dialog that appears, select “Preserve the existing permissions.” Then rename the new GPO as desired.
