If you have ever wondered how to set restrictions to allow access only for users in a particular organizational unit (OU) to a MOSS site collection without naming all the people in it then this article might just make your day.
http://support.microsoft.com/kb/943100