You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The functional level of the domain is Windows Server 2003. The organizational unit (OU) structure is shown in the exhibit.

Your company uses an X.500 directory service enabled product to support a sales and marketing application. The application is used only by users in the sales department and the marketing department. The application uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active Directory for all Sales and Marketing users. These users are instructed to log on by using their InetOrgPerson object as their user account. Microsoft Identity Integration Server is configured to copy changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product. All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson objects for sales employees are located in the Sales OU. Mikhail is another administrator in your company. Mikhail is responsible for managing the objects for users who require access to the X.500 directory service enabled product.

You need to configure Active Directory to allow Mikhail to perform his responsibilities.

Which action or actions should you take? (Choose all that apply.)

A.
On the domain, grant Mikhail the permission to manage user objects.

B.
On the domain, grant Mikhail the permission to manage InetOrgPerson objects.

C.
On the Sales OU, block the inheritance of permissions.

D.
On the Marketing OU, block the inheritance of permissions.

E.
On the Dev OU, block the inheritance of permissions