Hi all. Is there a GPO rule I can tag to an OU that will "automatically" disable the computer accounts within it? For example, as soon as a machine is moved into that OU, it becomes disabled and cant be re-enabled unless moved. Cheers guys. Ray