Is there any filtering available to make group policy changes beyond just filtering at the OU level? With Windows AD clients WMI filtering is an option but that doesn't seem to be possible with VGP.
There is currently no support for WMI filtering in our VGP client. However, if filtering by OU doesn't provide enough control over which servers a policy applies to then Security Filtering is an option. The GPO can be set up to filter by a security group which all of the desired servers are added to.