You manage a single pooled host pool. Marketing users require webcam and microphone redirection for video creation, but Finance users must be blocked from redirecting any devices. You must meet the requirements without creating a new host pool. Which two actions should you perform? Choose two answers.

This scenario requires applying different user-specific Group Policy settings to users on the same session hosts. By default, user policies are applied from the user's OU, and computer policies from the computer's OU. To apply user policies based on the session host's OU, Group Policy loopback processing must be enabled on the Organizational Unit (OU) containing the session hosts. Setting it to "Merge" ensures that user policies from the session host's OU are applied after the user's own policies, allowing for overrides. Then, two user-scoped GPOs are created: one allowing device redirection for the Marketing group and another denying it for the Finance group. These GPOs are security-filtered to their respective Active Directory groups, ensuring they only apply to the intended users. Setting host pool RDP properties is incorrect because these apply globally to the host pool, not selectively by user. Creating separate workspaces or using logon scripts for HKLM settings are not the standard or most efficient methods for managing user-specific device redirection in AVD.