Figure 1. Use Server Roles to Secure Servers
Use Group Policy objects and a server role-based organizational unit structure to secure your servers. Here, you see one policy applied to domain controllers, one baseline policy assigned to all servers, and one delta policy assigned to each server role.