Policy for a Server OU based on user groups?

<p>What I'm trying to do is lock down our remote application servers from "normal" users.&nbsp; This way if they should remote in to a desktop they'll be able to log off and that's about it.&nbsp; If I set up a OU called RemoteAppServers (for example) and add the remote application servers to that the policy will only effect those servers I get that part.&nbsp; Now if I want to take it one step further and have it only apply to certain user groups I would add the user groups to the "Security Filtering" and remove </p><p>As my profile says Jack of all trades master of none (the joys of working in a small business that acts big) so please bear with me if this is a basic question.</p>