Your company has an organizational unit named Production. The Production organizational unit has a child organizational unit named R&D. You create a GPO named Software Deployment and link it to the Production organizational unit. You create a shadow group for the R&D organizational unit. You need to deploy an application to users in the Production organizational unit. You also need to ensure that the application is not deployed to users in the R&D organizational unit. What are two possible ways to achieve this goal（）

A. Configure the Enforce setting on the software deployment GP
B. Configure the Block Inheritance setting on the R&D organizational unit.
Configure the Block Inheritance setting on the Production organizational unit.
D. Configure security filtering on the Software Deployment GPO to Deny Apply group policy for the R&D security grou