You are the network administrator for a company that has a single office. The network consists of a single
Active Directory domain and a single site. All servers run Windows Server 2003. All file and print servers
and application servers are located in an organizational unit (OU) named Servers. A server support team
handles daily support issues for the file and print servers and application servers. All of the server support
team’s user accounts are located in an OU named SST. You are responsible for managing security for the
company’s servers. You create a group named ServerSupport that includes all the user accounts of the
server support team. You need to ensure that members of the server support team can log on locally to only
the file and print servers and the application servers. What should you do?

A.
Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right.
Link the GPO to the Servers OU.

B.
Assign the ServerSupport group the Allow – Full Control permission for the Computers container.

C.
Create a Group Policy object (GPO) to grant the ServerSupport group the Allow log on locally user right.
Link the GPO to the SST OU.

D.
Assign the ServerSupport group the Allow – Full Control permission for the Servers OU.