You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is audited
You need to ensure that the settings in the GPO are notprocessed by user accounts or computer accounts in the Finance organizational unit (OU)
You need to ensure that a search of the entire directory for users in the marketing department returns all of the users who have the Marketing Department attribute