I have:

OU1
|
|
------
OU2

I want to have users in OU1 one a policy assigned, but this policy is NOT to
apply to users in OU2 (which is below OU1)

Is it done by Rules Association/Policy applies to given container only

What does the Block option do? (in same place0

Seb