You are the network administrator for your company. The company consists of two subsidiaries named Contoso, Ltd., and Fabrikam, Inc. The network consists of two Active Directory forests. The WAN connections that connect some domain controllers are unreliable. The domain and trust configuration is shown in the Network Diagram exhibit.

You create shared folders on Windows Server 2003 member servers in both forests. Some of the shared folders are accessible to users from both forests. For each of the shared folders, you create a domain local group. You add global groups from domains in either forest to the domain local group. The Fabrikam, Inc., division is sold to a different company. You delete the trust relationship between the two forests. You notice that after the trust relationship is deleted, the membership lists for some of the domain local groups are no longer accurate. When you view a membership list, it contains entries without user-friendly names. A sample is shown in the Membership List exhibit.

You need to delete all the unknown groups from the membership list for the domain local groups. You want to achieve this goal by using the minimum amount of administrative effort, and without modifying the access to resources for users in the contoso.com forest.

What should you do?

A.
Create new domain local groups. Add the required global groups from the contoso.com forest to the domain local groups. Grant appropriate permissions to the domain local groups. Delete the original domain local groups.

B.
Re-create the trust relationship between contoso.com forest and the fabrikam.com forest. Delete all the fabrikam.com global group accounts from the domain local group membership lists. Delete the trust relationship between the two forests.

C.
Verify all remaining trust relationships. Then delete the unknown accounts from the domain local groups.

D.
Delete all the affected domain local groups. Re-create the groups. Add the appropriate global groups from the contoso.com forest to the groups. Grant appropriate permissions to the domain local groups.