You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003. The company decides to make five Windows XP
Professional computers available in a public area for use by visitors. These computers are to be used only
for browsing public Web sites. A Web browser is the only application that will be run on these computers.
You make these computers members of the Active Directory domain. You create a new organizational unit
(OU) named Restricted Computers and place the five computer accounts in this OU. You configure these
computers to automatically log on a user named Restricted User each time the computer is started. The
Restricted User account does not have administrative rights on the computer or on the domain. You need to
configure the five computers so that they can access public Web sites but cannot run other applications.
The restrictions must not affect other users or computers on the network. What are two possible ways to
achieve this goal? (Each correct answer presents a complete solution. Choose two.)

A.
Create a Group Policy object (GPO) and link it to the Restricted Computers OU. Configure the user
settings in the GPO to allow only Internet Explorer to run. Configure the GPO to apply only to the
Restricted User account.

B.
Create a Group Policy object (GPO) and link it to the Restricted Computers OU. Configure the user
settings in the GPO to allow only Internet Explorer to run. Configure the computer settings in the GPO to
enable loopback mode.

C.
Create a Group Policy object (GPO) and link it to the domain. Configure the user settings in the GPO to
allow only Internet Explorer to run. Configure the computer settings in the GPO to enable loopback
mode.

D.
Create a Group Policy object (GPO) and link it to the domain. Configure the user settings in the GPO to
allow only Internet Explorer to run. Configure the GPO to apply only to the Restricted User account.