Your company has an organizational unit named Production. The Production organizational unit has a child organizational unit named R&D You create a GPO named Software Deployment and link it to the Production organizational unit. You create a shadow group for the R&D organizational unit. You need to deploy an application to users in the Production organizational unit. You also need to ensure that the application is not deployed to users in the R&D organizational unit. What are two possible ways to achieve this goal（）
- AConfigure the Enforce setting on the software deployment GPO.
- BConfigure the Block Inheritance setting on the R&D organizational unit.
- CConfigure the Block Inheritance setting on the Production organizational unit.
- DConfigure security filtering on the Software Deployment GPO to Deny Apply group policy for the R&D security group.