You work as a desktop support technician at ABC.com. The ABC.com network consists of a single
Active Directory domain named ABC.com.
You have set up a test computer that has Windows 7 installed. You have configured a user
account that belongs to the Administrators group, and a user account that belongs to the Users
group. The accounts are named TestA and TestU respectively.

You are then instructed to make sure that the Control Panel is inaccessible to TestU and
completely accessible to TestA.
Which of the following actions should you take? (Choose TWO.)

A.
You should consider configuring a local GPO, and associating it with the TestU account.

B.
You should consider configuring a local GPO, and associating it with the TestA account.

C.
You should consider making use of the Prohibit Access to Control Panel option via User
Configuration.

D.
You should consider making use of the Allow Access to Control Panel option via User
Configuration.

Explanation: