You are designing an Active Directory forest for a company named Contoso, Ltd. Contoso identifies the following administration requirements for the design:

User account

administration and Group Policy administration will be performed by network technicians. The technicians will be added to a group named OUAdmins.

IT staff who are responsible for backing up servers will have user accounts that are members of the Backup Ope

rators group in the domain.

All user accounts will be located in an organizational unit (OU) named AllEmployees.

You run the Delegation of Control Wizard and assign the OUAdmins group full control to all of the objects in the All Employees OU.

After dele

gating the required permissions, you discover that the user accounts of some of the IT staff have inconsistent permissions on the objects in AllEmployees.

You need to recommend a solution to ensure that the members of OUAdmins can manage all of the object

s in AllEmployees.

What should you include in the recommendation?

A. Remove the IT staff user accounts from Backup Operators and place them in a new group. Grant the new group the Backup files and directories user right and the Restore files and director

ies user right. Enforce permission inheritance on all of the objects in the AllEmployees OU.

B. Create separate administrator user accounts for the technicians. Enforce permission inheritance on all of the objects in the AllEmployees OU. Delegate permissio

ns to the new user accounts.

C. Enforce permission inheritance on all of the objects in the AllEmployees OU. Run the Delegation of Control Wizard.

D. Move the user accounts of the technicians to a separate OU. Enforce permission inheritance on all of the o

bjects in the AllEmployees OU. Run the Delegation of Control Wizard on the AllEmployees OU.

Explanation: