You can also have greater granularity by having multiple GPOs on one OU and then ACL in separate groups. Just click the Security tab and follow your nose.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
