Your network contains an Active Directory domain named contoso.com.
You have a Group Policy object (GPO) named GPO1 that contains several user settings. GPO1 is
linked to an organizational unit (OU) named OU1.
The help desk reports that GPO1 applies to only some of the users in OU1.
You open Group Policy Management as shown in the exhibit. (Click the Exhibit button.)

You need to configure GPO1 to apply to all of the users in OU1.
What should you do?

A.
Modify the Security settings of GPO1.

B.
Disable Block Inheritance on OU1.

C.
Modify the GPO status of GPO1.

D.
Enforce GPO1.

Explanation:
Inheritance is blocked, but that would only affect policies applied ABOVE the given OU, not the one
applied directly to it (as is the case with GPO1). Also Enforcing a policy is only going to cause it to be
applied even when inheritance is blocked (which, as mentioned, does not make a difference on
policies which are directly linked to the OU as a child). That means that there must be something in
the security settings (such as a Security Group which does not have the “read” or “Apply group
policy” permission) preventing ALL of the users in OU1 from having the policy applied. (GPO status is
the status of its replication within the forest, so it is not relevant here.)