How do I restrict settings on only 1 TS server?

[Noob]

I need to remove the ability to create VPN connections off of only 1
terminal server.

I know that I can create a new OU and move the TS server to there.
Create a new GPO and make the change to "Network/Network Connections"
section and apply it to that OU. But this is a "User Configuration"
and will not apply to that server because there is no users under
that
OU (correct me if I am wrong on that).

I can't apply the new GPO to the users OU because they make other VPN
connection.

So, how do I remove the ability to create VPN connections off of 1
Terminal Server? I have looked under the Local Security Settings but
I
am not able to find anything there.

Any help would be welcome
~am a noob~