You have a single Active Directory directory service domain with an enterprise certification authority (CA). You are creating a new Group Policy object (GPO) to perform certificate autoenrollment. You need to ensure that users are notified when an autoenrollment failure occurs. What should you do?

A.
Modify the certificate template by selecting the Reenroll All Certificate Holders option.

B.
Modify the certificate template by changing the required number of authorized signatures from 1 to 2.

C.
Modify the certificate template by selecting the Include symmetric algorithms allowed by the subject option.

D.
Modify the certificate template by selecting the Require user input for autoenrollment option.