You are a desktop support technician for your company. All client computers run Windows XP Professional. The network consists of a Windows 2000 Active Directory domain.

A department manager reports that some of the files on drive D on her computer were deleted and other data was modified.

You need to track when unauthorized users attempt to modify or delete data from drive D on the manager’s computer.

What should you do first?

A.
Run the secedit command on the client computer.

B.
Run the gpupdate command on the client computer.

C.
Configure the security access control list for drive D on the client computer to audit the Everyone group.

D.
Configure the access control list for drive D on the client computer to assign the Deny – Change permission for the Everyone group.