Which OUs should the Workstation Settings GPO be linked to?

Which OUs should the Workstation Settings GPO be linked to?

• A. Marketing; Sales; Support
• B. CorpNet.local only
• C. Marketing > TempMarketing; Sales > TempSales; Support
• D. Sales > TempSales only

Answer: (C)

In Active Directory, the scope of a GPO is determined by where it’s linked and the OU structure beneath it. To apply workstation settings only to the intended machines, link the Workstation Settings GPO to the temporary sub-OUs that actually contain those computers—TempMarketing under Marketing, TempSales under Sales, and TempSupport under Support. This confines the policy to the specific temporary workstations you want to configure, while leaving the permanent department machines untouched. Linking to the broader Marketing, Sales, or Support OUs would apply the settings to all devices in those departments, which is usually not desired. Linking to the domain root or a top-level domain would apply the policy even more broadly, often unwanted. By targeting the Temp sub-OUs, you achieve precise, manageable scope for the workstation settings.

In Active Directory, the scope of a GPO is determined by where it’s linked and the OU structure beneath it. To apply workstation settings only to the intended machines, link the Workstation Settings GPO to the temporary sub-OUs that actually contain those computers—TempMarketing under Marketing, TempSales under Sales, and TempSupport under Support. This confines the policy to the specific temporary workstations you want to configure, while leaving the permanent department machines untouched. Linking to the broader Marketing, Sales, or Support OUs would apply the settings to all devices in those departments, which is usually not desired. Linking to the domain root or a top-level domain would apply the policy even more broadly, often unwanted. By targeting the Temp sub-OUs, you achieve precise, manageable scope for the workstation settings.