Your network contains an Active Directory domain named contoso.com.
All servers run Windows Server 2012 R2. The domain contains a file server named Server1.
The domain contains a domain controller named DC1.
Server1 contains three shared folders.
The folders are configured as shown in the following table.

Folder2 has a conditional expression of User.Department= = MMarketing”.
You discover that a user named User1 cannot access \\\\Server1\\folder2. User1 can access \\\\Server1\\folderl and \\\\Server1\\folder3.
You verify the group membership of User1 as shown in the Member Of exhibit. (Click the Exhibit button.)

You verify the organization information of User1 as shown in the Organization exhibit. (Click the Exhibit button.)

You verify the general properties of User1 as shown in the General exhibit. (Click the Exhibit button.)

You need to ensure that User1 can access the contents of \\\\Server1\\folder2.
What should you do?

A.
From a Group Policy object (GPO), set the Support for Dynamic Access Control and Kerberos armoring setting to Always provide claims.

B.
Change the department attribute of User1.

C.
Grant the Full Control NTFS permissions on Folder2 to User1.

D.
Remove Userl1from the Accounting global group.

Explanation:
Conditional Expression and users Department must match
http://technet.microsoft.com/en-us/library/jj134043.aspx