All the servers in your company run Windows Server 2003. You configure a server as a stand-alone certification authority (CA) that uses role separation.

Members of the local Administrators group are no longer able to perform role-based administration of the CA. You need to ensure that members of the local Administrators group can perform role-based administration of the CA.

What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)

A.
Assign the Auditor role to the local Administrators group.

B.
Assign the Backup Operator role to the local Administrators group.

C.
Remove the CA Administrator role from the local Administrators group.

D.
Remove the Certificate Manager role from the local Administrators group.