Abuse writable GPOs for code execution on an OU

Write access to a GPO linked to an OU means an immediate or scheduled task on every computer in that OU.