Your network contains an Active Direct

ory domain named contoso.com. The domain contains an organizational unit (OU) named OU1. Your company applies several Group Policy objects (GPOs) at the domain level. These GPOs affect client computer settings.

You must enforce new security settings. You

create a new GPO named GPO1 and link the GPO to contoso.com.

You need to design a Group Policy strategy to meet the following requirements:

The security settings in GPO1 must be applied to all client computers.

Only GPO1 and other GPOs that are linked to

OU1 must be applied to the client computers in OU1.

What should you include in the design?

More than one answer choice may achieve the goal. Select the BEST answer.

A. Enable the Block Inheritance option at the domain level. Enable the Enforced option o

n GPO1.

B. Enable the Block Inheritance option on OU1. Link GPO1 to OU1.

C. Enable the Block Inheritance option on OU1. Enable the Enforced option on all of the GPOs linked to OU1.

D. Enable the Block Inheritance option on OU1. Enable the Enforced option

on GPO1.

Explanation:

* You can block inheritance for a domain or organizational unit. Block in inheritance prevents Group Policy objects (GPOs) that are linked to higher sites, domains, or organizational units from being automatically inheri

ted by the child-level.

* GPO links that are enforced cannot be blocked from the parent container.