70-297 Questiong regarding GPOs and OUs

crystal

Hi There,

I'm currently studying for my 70-297 with a view to taking it next Thursday (16th of August) and I think things are going OK but I have a question.

I've used both MeasureUp and Transcender practise tests to get me ready and their answers to a specific sort of question seem to contrast.

Say you have a situation where you have to assign a GPO to a specific set of users but not to others, MeasureUp recommend you would configure the GPO, link it to the domain and restrict access to the GPO to only those who should be allowed to apply it via security settings of the GPO. They also say that OUs should only be implemented for administrative delegation.

Transcender however state that this is against Microsoft's best practise recommendations and in fact you should create a seperate OU for this purpose, place the users in the OU and link the GPO to the OU.

What should I assume is the correct way to answer questions like this on the exam?

Thanks