What should Sakura do to ensure that changes in the domain-level GPO are applied to all users and computer accounts?

To ensure that changes in the domain-level Group Policy Object (GPO) are applied universally to all users and computer accounts, configuring the GPO link with the Enforced setting is essential. The Enforced setting makes the linked GPO authoritative for all subordinate Organizational Units (OUs). This means that even if there are conflicting settings in lower-level OUs or local GPOs, the rules defined in the Enforced GPO will take precedence, ensuring consistent policy application across the entire domain.

In contrast, other options could complicate or block the application of the desired policies. For example, configuring Block Inheritance prevents an OU from inheriting GPO settings from its parent OUs, which would obfuscate the application of the domain-level GPO. Asking users to accept settings or moving them to a different OU would not guarantee that the intended GPO settings are applied uniformly, as these approaches do not inherently address the inheritance chain or ensure priority in policy application. Therefore, using the Enforced setting is the most effective and reliable method to achieve the goal of consistent GPO application throughout the domain.