A. You can apply GPOs at the site, domain, or organizational unit (OU) level; however, they're always stored in a specific domain. If a domain has child domains, the child domains and the objects therein don't inherit the parent's policies. Such inheritance would lead to cross-domain GPO linking, which isn't desirable. If you want to apply a policy to child domains, you need to either manually recreate the policy and apply it to the child domains or use Group Policy Management Console (GPMC) to export the policy, then import it into the new domain.