Default Domain Policy is configured to allow System Restore. Registry settings in the policy are also set to update computer registry hex value for restore to 00000000. This applies about 50% of the time. The other 50% of the time, it ignores this and sets the hex value to 00000001, which disables the users ability to create a restore point.
There is not another policy for the OU, it should apply the default domain policy.