Blocking the entire Default Domain Policy for your organizational unit (OU) is not advisable. However, a certain setting within the Default Domain Policy can sometimes cause issues within your department. You can create a group policy that will override one or several of those settings.