Security group to computer object?

Good day,
I was attempting to take a domain local group, add them to the security of a computer object and provide them read access. This will be for every computer object in an ou.

For instance
Object class = Organizational unit
Canonical name of object corporate.yyy.com/special/device

Inside this Ou there is approximately 700 plus computer objects.
The group corp.yyy.com needs read access security on ever object.

First draft i was thinking

Set-location AD:
$ou = Get-ADOrganizationalUnit -Filter { name -like “device”}
cd $ou
$acl = get-childitem | foreach-object {get-acl}

THen i got stuck about there and my brain fried.

Any help suggestions would be greatly appreciated.

Thank you