You have a Windows Server 2003 Active Directory directory service forest with two domains named contoso.com and corp.contoso.com, and two sites named Site1 and Site2. Site1 has two domain controllers for the contoso.com domain. Site2 has two domain controllers for the corp.contoso.com domain. Replication traffic is creating network congestion. Your environment contains a large number of universal security groups. You examine the universal groups and find that they contain global security groups and individual user accounts from both domains. The universal group memberships change frequently. You need to reduce the Active Directory replication traffic. You must maintain the ability to assign groups from one domain access to resources in the other domain. What should you do?

A.
Remove the global groups from the universal groups.

B.
Move the individual user accounts from the universal groups to the appropriate global groups.

C.
Convert the global groups to universal groups.

D.
Convert the universal groups to global groups.