You are an Enterprise administrator for TestKing.com. The corporate network of the company consists of a single Active Directory domain. All the servers on the network run Windows Server 2008 and all client computers run Windows Vista.
The Active Directory domain contains a top-level organizational unit (OU) called AccountingOU, which contains all computer and user accounts for the accounting department.
You have been asked to deploy an accounting application that can only be accessed by the accounting users. Which of the following options would you deploy to accomplish the desired task?

A.
Terminal Service Session Broker (TS Session Broker) role service

B.
Microsoft System Center Operations Manager (SCOM)

C.
Group Policy object (GPO) for the Accounting OU

D.
Windows Server Update Service (WSUS)

E.
None of the above

Explanation:

To deploy an accounting application that can only be accessed by the accounting users, you need to deploy a Group Policy object (GPO) for the AccountingOU.
As you may already know, in an Active Directory environment, group policies are the main component of network security. Group policy objects can be applied either to users or to computers. Deploying applications through the Active Directory is also done through the use of group policies, and therefore applications are deployed either on a per user basis or on a per computer basis.
http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Deploy-Applications.html