问题：

[单选]

Your network consists of a single Active Directory domain. User accounts for engineering department  are located in an OU named Engineering.   
You need to create a password policy for the engineering department that is different from your domain  password policy.   
What should you do（）

A . Create a new GPO. Link the GPO to the Engineering OU.
B . Create a new GPO. Link the GPO to the domain. Block policy inheritance on all OUs except for the  Engineering OU.
C . Create a global security group and add all the user accounts for the engineering department to the  group. Create a new Password Policy Object （PSO） and apply it to the group.
D . Create a domain local security group and add all the user accounts for the engineering department to  the group. From the Active Directory Users and Computer console， select the group and run the  Delegation of Control Wizard.