One way to implement Active Directory group policies in Horizon 7 is to create an OU for the Horizon 7 machines that deliver remote desktop sessions and link one or more GPOs to that OU. You can use these GPOs to apply group policy settings to your Horizon 7 machines.
You can link GPOs directly to a domain if the policy settings apply to all computers in the domain. As a best practice, however, most deployments should link GPOs to individual OUs to avoid policy processing on all computers in the domain.
You can configure policies on your Active Directory Server or on any computer in your domain. This example shows how to configure policies directly on your Active Directory server.