Is it possible to limit AD security groups by OU?

Question

Let\'s imagine I have an AD setup like this:

And what I want to do is limit the tree, so that the security groups in say HR, can ONLY be applied to Users in H