I prefer to use the Group Policy Management Console because of the cool tree structure it has. Policies are much easier to write using it, and it is well implemented in Server 2012 (gpmc.msc). Once the policy is written (using simple menu trees), you can create an OU (Organizational Unit) in Active Directory and apply the policy to the OU. To apply the policy to a computer or a group of computers, simply drag the computer into the OU in the Active Directory console. At least that is the way I do it.
But I do not know how Windows 10 will allow me to create policies in Server 2012 which can be enforced by the domain controller.