David, a system administrator, has created specific GPOs for every department in his organization based on the permissions required by the various departments. However, he needs to apply the Default Domain Policy for some managers but not for the rest of the users. How can David ensure that the Default Domain Policy is applied only to specific managers' accounts?
A) By using the Block Inheritance setting on the domain-level GPO
B) By using the Enforced setting on the OU-level GPOs for the OUs that contain the managers' accounts
C) By removing the Authenticated Users group from the Security Filtering section and adding the managers' accounts
D) By using a WMI filter to check for conditions under which the Default Domain Policy must be applied

Question

Quizplus · Accepted Answer

To ensure that the Default Domain Policy is only applied to specific managers' accounts, David should remove the Authenticated Users group from the Security Filtering section and add the managers' accounts. This will limit the scope of the Default Domain Policy to only the selected managers' accounts while allowing the other departmental GPOs to continue functioning as before. The Block Inheritance setting on the domain-level GPO (option A) would block all GPOs from being applied to the managers' accounts, which is not the desired outcome. The Enforced setting on the OU-level GPOs (option B) would ensure that certain GPOs are applied even if there are conflicting GPOs at a higher level, but it would not restrict the scope of the Default Domain Policy. Using a WMI filter (option D) would allow for more complex conditions to be checked before applying the Default Domain Policy, but it is not necessary for this scenario.

David, a System Administrator, Has Created Specific GPOs for Every