Your company has an organizational unit named Production. The Production organizational unit has a child organizational unit named R&D. You create a GPO named Software Deployment and link it to the Production organizational unit. You create a shadow group for the R&D organizational unit. You need to deploy an application to users in the Production organizational unit. You also need to ensure that the application is not deployed to users in the R&D organizational unit. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution.
Choose two.)

A.
Configure the Enforce setting on the software deployment GPO.

B.
Configure the Block Inheritance setting on the R&D organizational unit.

C.
Configure the Block Inheritance setting on the Production organizational unit.

D.
Configure security filtering on the Software Deployment GPO to Deny Apply group policy for the R&D security group.