Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You need to ensure that when users log on to clientcomputers, they are added automatically to the local
Administrators group. The users must be removed from the group when they log off of the client computers.
What should you do?

A.
Modify the Group Policy permissions.

B.
Enable block inheritance.

C.
Configure the link order.

D.
Enable loopback processing in merge mode.

E.
Enable loopback processing in replace mode.

F.
Configure WMI filtering.

G.
Configure Restricted Groups.

H.
Configure Group Policy Preferences.

I.
Link the Group Policy object (GPO) to the Sales OU.

J.
Link the Group Policy object (GPO) to the Engineering OU.

Explanation:
Practically the same question as L/Q8.
Reference:
http://daniel.streefkerkonline.com/managing-local-admins-using-gpp/
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/