Your company has a single Active Directory directory service domain. All servers run Windows Server 2003. You remotely administer all servers from client computers that use Remote Desktop Client 5.2. All remote administration connections that are made to servers must be authenticated with Kerberos and must use Transport Layer Security (TLS). You need to design a remote administration network authentication methodology.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
On each server enable Remote Desktop, and configure the RDP security layer to Negotiate.

B.
On each server enable Remote Desktop, configure the RDP encryption level to FIPS, and configure the RDP security layer to SSL.

C.
Install user certificates on each server and on each client computer.

D.
Install computer certificates on each server and on each client computer.