What is the smallest unit in Active Directory on which you can assign Group Policy settings?

What is the smallest unit in Active Directory on which you can assign Group Policy settings?

• A. Organizational Unit
• B. Domain
• C. Site
• D. User container

Answer: (A)

The key idea is how Group Policy is scoped in Active Directory. A GPO is attached (linked) to a container, and the policy applies to the objects inside that container. You can link a GPO to sites, domains, or organizational units, and then the settings apply to the computers and users within that scope. The smallest, most granular container you can target with a GPO is an organizational unit. By placing accounts and devices into an OU, you can apply specific policy settings only to that subset, without affecting others in the domain. Linking a GPO to the domain would affect everyone in the domain, and linking to a site would apply more broadly by physical location. The built-in User container is not typically used as a target for GPOs, and even if it were, it’s not as flexible for granular scoping as an OU.

The key idea is how Group Policy is scoped in Active Directory. A GPO is attached (linked) to a container, and the policy applies to the objects inside that container. You can link a GPO to sites, domains, or organizational units, and then the settings apply to the computers and users within that scope. The smallest, most granular container you can target with a GPO is an organizational unit. By placing accounts and devices into an OU, you can apply specific policy settings only to that subset, without affecting others in the domain. Linking a GPO to the domain would affect everyone in the domain, and linking to a site would apply more broadly by physical location. The built-in User container is not typically used as a target for GPOs, and even if it were, it’s not as flexible for granular scoping as an OU.