Security for Users and Machines in Active Directory Organizational Units

C.

The correct answer is B. Group Policy.

Group Policy is a feature of Active Directory (AD) that enables administrators to centrally manage and enforce system and user settings for networked Windows computers. Group Policy settings can be applied to users, computers, and organizational units (OU) in the AD hierarchy. By applying Group Policy to an organizational unit, administrators can control the security settings for both the user and the machine.

Group Policy can be used to enforce a wide range of security settings, such as password policies, account lockout policies, user rights assignments, software restrictions, and firewall rules. Group Policy can also be used to deploy software, configure network settings, and control various aspects of the user interface.

Folder Redirection is a feature that allows administrators to redirect specific folders, such as Documents, Desktop, and Favorites, to a network location. This can help centralize user data and simplify backup and restore operations, but it does not directly provide security to the user or the machine.

Security Groups are a way to group users, computers, or other security principals together to simplify the assignment of permissions and rights. Security Groups can be used in combination with Group Policy to control access to resources and enforce security settings, but they do not provide security directly to an organizational unit.

Home Folder is a personal network storage location that can be assigned to users. It allows users to store and access their files from any computer on the network, but it does not provide security directly to the user or the machine.