You are a desktop support technician for your company. The company network contains a single Active Directory domain. A Group Policy Object (GPO) named HRApp is linked to the Human Resources organizational unit (OU). The HRApp GPO is configured to assign an application named HRApp.
A user is transferred from the human resources department to the finance department. You must move the user account to the Finance OU. You determine that the user is able to run HRApp. You need to recommend a solution that allows only users in the Human Resources OU to run HRApp.
What should you recommend?
A.
Define a logon script for all users that runs gpupdate.exe
B.
Configure the HRapp GPO link with the No Override option.
C.
Configure the Human Resources OU to block policy inheritance.
D.
Modify the HRApp GPO to uninstall the application for users no longer under the scope of the GPO.