问题：

[单选]

You are a network administrator for your company. The network consists of a single Active Directory domain. The network contains 80 Web servers that run Windows 2000 Server. The IIS Lockdown Wizard is run on all Web servers as they are deployed.  
Your company is planning to upgrade its Web servers to Windows Server 2003. You move all Web servers into an organizational unit （OU） named Web Servers.  
You are planning a baseline security configuration for the Web servers. The company’s written security policy states that all unnecessary services must be disabled on servers. Testing shows that the server upgrade process leaves the following unnecessary services enabled： 

Your plan for the baseline security configuration for Web servers must comply with the written security policy.  You need to ensure that unnecessary services are always disabled on the Web servers. 
 What should you do？ （）

A .  Create a Group Policy object （GPO） to apply a logon script that disables the unnecessary services. Link the GPO to the Web Servers OU.
B .  Create a Group Policy object （GPO） and import the Hisecws.inf security template. Link the GPO to the Web Servers OU.
C .  Create a Group Policy object （GPO） to set the startup type of the unnecessary services to Disabled. Link the GPO to the Web Servers OU.
D .  Create a Group Policy object （GPO） to apply a startup script to stop the unnecessary services. Link the GPO to the Web Servers OU.