You work as a network administrator at Bilco Engineering, Inc. You have received instruction to start the design of an access control and permission strategy that will be used for user objects in Active Directory.

You are required to select the appropriate actions to take in the scenario.

What should you do?

A.
The permissions on the domain object and its child objects should be changed that the BasicSupport security group is denied permissions. Also you should add permission to each OU that contains user accounts allowing the AllSupport security group members to reset passwords in that OU.

B.
Full control should be delegated over all OUs that contain user accounts to all AllSupport
security group.

C.
The members of the AdvancedSupport security group should be made members of the Domain Admins security group.

D.
Each desktop support technician should be given permission to reset passwords for the toplevel OU that contains user accounts at their own location.