You are the network administrator for The network consists of a single Active Directory domain named All network servers run Windows Server 2003. Some client computers run Windows XP Professional, and
the rest run Windows NT 4.0 Workstation.
TestKing includes departments for accounting, design, marketing, and sales. Each department has a corresponding organizational unit (OU).
A member server named Testking1 can be accessed only by user accounts in the Accounting, Design, Marketing, and Sales OUs. You install Terminal Server on Testking1. Then you install four new applications on Testking1. Each application is intended for users in only one of the four departments.
You need to ensure that each application can be accessed only by users in the appropriate department. You need to achieve this goal by using the minimum amount of administrative effort.
What should you do?（）

A. In the Default Policy Group Policy object (GPO), configure the Start program on connection policy to be the program path and file name of the application to start when the user logs on.
B. In each OU, set the Environment property for each user to the program path and file name of the application that corresponds to the OU.
C. On Testking1, select the RDP-Tcp connection properties. Set the program path and file name of the application to start when the user logs on.
D. Create one Group Policy object (GPO) for each department. Link each GPO to the corresponding OU. For each GPO, configure the Start program on connection policy to run the application that corresponds to the appropriate department.