Your network consists of one Active directory domain. The functional level of the domain is Windows
Server 2008. The domain is configured as shown in the exhibit. (Click the Exhibit button.)
You create four Group Policy objects (GPOs) as shown in the following table. (Click the Exhibit)
You need to link the new GPOs to meet the following requirements:
• All users must have access to a USB printer device.
• All users except the department managers must be denied access to USB flash drives.
• Both department managers must have access to USB flash drives and a USB printer device.
• Only users in the sales department must have the custom database application installed.
• Only users in the engineering department must have the line-of-business application installed.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do?

A.
Link GPO1 to the Sales Users OU. Link GPO2 to the Engineering Users OU. Link GPO3 to the All
Users OU. Link GPO4 to the Managers OU.

B.
Link GPO1 and GPO2 to the Sales Users OU and the Engineering Users OU. Link GPO3 to the
domain and block inheritance for the Managers OU. Link GPO4 to the All Users OU.

C.
Link GPO1 and GPO2 to the Sales Users OU and the Engineering Users OU. Link GPO3 to the All
Users OU. Link GPO4 to the domain and block inheritance for the All Users OU.

D.
Link GPO1 to the Sales Users OU. Link GPO2 to the Engineering Users OU. Link GPO3 to the All
Users OU and block inheritance for the Managers OU. Link GPO4 to the Managers OU.

Explanation:
To ensure that all the domain users have access to a USB printer device, you need to Link GPOUsbPr
to the All Users OU. To ensure that no user except the department managers should be allowed to

access USB flash drives Link GPOUsbFl to the Managers OU. Next to ensure that the sales
department employees should only be allowed to install custom database application you need to
Link GPODB to the Sales Users OU and to ensure that the Marketing department employees should
be only be allowed to install line-of-business application, you need to link GPOApp to the
Development Users OU.