Need to restrice only one TS server.. how?

[Guest Noob]

I need to remove the ability to create VPN connections off of only 1

terminal server.

 

I know that I can create a new OU and move the TS server to there.

Create a new GPO and make the change to "Network/Network Connections"

section and apply it to that OU. But this is a "User Configuration"

and will not apply to that server because there is no users under

that

OU (correct me if I am wrong on that).

 

I can't apply the new GPO to the users OU because they make other VPN

connection.

 

So, how do I remove the ability to create VPN connections off of 1

Terminal Server? I have looked under the Local Security Settings but

I

am not able to find anything there.

 

Any help would be welcome

~am a noob~