Your company has an Active Directory domain. The company runs Remote Desktop Services. Standard users who connect to the Remote Desktop Session Host Server are in an organizational unit (OU) named OU1. Administrative users are in OU1. No other users connect to the Remote Desktop Session Host Server.
You need to ensure that only members of OU1 can run the Remote Desktop Protocol files.
What should you do?

A.
Create a Group Policy object (GPO) that configures the Allow .rdp files from unknown publishers policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to OU1.

B.
Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and user’s default .rdp settings policy setting in the Remote Desktop Client Connection template to Disabled. Apply the GPO to OU1.

C.
Create a Group Policy object (GPO) that configures the Allow .rdp files from valid publishers and user’s default .rdp settings policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to OU1.

D.
Create a Group Policy object (GPO) that configures the Specify SHA1 thumbprints of certificates representing trusted .rdp publishers policy setting in the Remote Desktop Client Connection template to Enabled. Apply the GPO to OU1.