Your network contains an Active Directory domain named contoso.com.
You have a Group Policy object (GPO) named GPO1 that contains several user settings. GPO1 is linked to an
organizational unit (OU) named OU1.
The help desk reports that GPO1 applies to only some of the users in OU1.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

You need to configure GPO1 to apply to all of the users in OU1.
What should you do?

A.
Modify the Security settings of GPO1.

B.
Disable Block Inheritance on OU1.

C.
Modify the GPO status of GPO1.

D.
Enforce GPO1.

Explanation:
Inheritance is blocked, but that would only affect policies applied ABOVE the given OU, not the one applied
directly to it (as is the case with GPO1). Also Enforcing a policy is only going to cause it to be applied even
when inheritance is blocked (which, as mentioned, does not make a difference on policies which are directly
linked to the OU as a child). That means that there must be something in the security settings (such as aSecurity Group which does not have the “read” or “Apply group policy” permission) preventing ALL of the users
in OU1 from having the policy applied. (GPO status is the status of its replication within the forest, so it is not
relevant here.)