Restricting users based on OU in people picker

Hello,

We are trying to restrict the users in People picker in based on different OU in SharePoint 2016. MS has a stsadm command which does set the directory path to a specific OU, but this sets for a site collection only. We want to limit this at a webapp level. The one which we used is below:-

stsadm -o setsiteuseraccountdirectorypath -path <Valid OU name> –url <Web application URL> 

Since we have hundreds of site collections, we don't want to do this on each site collection. We need to apply this filter at webapp level. We were trying some LDAP queries as well. But with LDAP queries the wildcard search does not work with description field. Has anyone done that or knows how to do that? Thanks in advance.