Network Access Protection (NAP) is configured in your System Center Configuration Manager 2007 environment.

You need to exclude only company executives from NAP policy enforcement.

What should you do?

A.
Create a new NAP policy. Add to the policy an Active Directory global security group that contains the client computers that should not be subject to NAP policies.

B.
Create a new NAP policy. Add to the policy an Active Directory global security group that contains the users that should not be subject to NAP policies.

C.
Disable the Network Access Protection client agent for the site.

D.
Implement a desired configuration management baseline for the executives.