You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. The sales department uses Windows Vista client computers. The finance department uses Windows XP client computers. All client computers are in the Clients organizational unit (OU). A software restriction policy is linked to the Clients OU. You are planning a new certificate autoenrollment Group Policy object (GPO) named AutoEnroll for the sales department client computers. You need to ensure that the AutoEnroll GPO applies to only the Windows Vista client computers. What should you do?

A.
Link the AutoEnroll GPO to the domain. Create a WMI filter. Link the AutoEnroll GPO to the WMI filter.

B.
Link the AutoEnroll GPO to the domain. Create a WMI filter. Link the Default Domain GPO to the WMI filter.

C.
Link the AutoEnroll GPO to the Clients OU. Create a WMI filter. Link the software restriction GPO to the WMI filter.

D.
Move the Windows XP client computers into a new OU. Link the AutoEnroll GPO to the domain.