You need to configure the GPOs to meet the following requirements: Ensure that GPO2 only applies to the user accounts in OU2 that are members of a global group named Group2