Which object type is commonly added as an exception in Active Directory configuration?

• A. Users
• B. Groups
• C. Organizational units
• D. Computers

Answer: (C)

Organizational Units are used to scope policy and administration in Active Directory. You link Group Policy Objects to OUs, and objects inside inherit those policies unless you block inheritance or apply a different GPO to a more specific OU. When you need an exception to the general policy, you place the affected objects into a separate OU that either doesn’t receive the policy or receives a different one. This creates a clear boundary where the exception can be applied without altering the overall domain structure. While users, groups, and computers are the entities you manage, they don’t by themselves define policy scope—the OU structure does, making it the natural place to model exceptions.