A company has a single Active Directory Domain Services (AD DS) domain. Each department within the company has its own organizational unit (OU). All client computers run Windows 7 Enterprise Edition and Microsoft Office 2010.
The company wants to restrict access to some Office 2010 features. They develop a standard list of corporate restrictions.
You have the following requirements:
– Apply the corporate restrictions to all existing and future departments.
– Ensure that specific restrictions can be added or removed for individual departments.
– Ensure that the corporate restrictions are not applied to users and computers in the built-in Active Directory containers.
– Minimize administrative effort for applying restrictions to future departments.
You need to recommend a Group Policy object (GPO) deployment that meets the requirements.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A.
Create a GPO that contains the corporate restrictions and link it to the domain. Install the Office 2010 Group Policy Administrative Template settings. Create a separate GPO for each department that deploys and configures Office 2010.
B.
Install the Office 2010 Group Policy Administrative Template settings. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys and configures Office 2010.
C.
Install the Office 2010 Resource Kit and create a custom transform (.mst) file for each department. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys Office 2010 by using the transform file.
D.
Install the Office 2010 Resource Kit and create custom installer files for each department.
Create a GPO that contains the corporate restrictions and link it to the domain. Create a separate GPO for each department that deploys the installer files,
Explanation:
Starter GPOs are used as a base template to build other GPOs from. admin templates (ADMX & ADML files) need to be applied so that the settings specific to Office 2010 can be applied