You are the network administrator for your company. The network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003. All client computers run Windows XP Professional. The only account in the Domain Admins security group is the Administrator account in the domain. Each night, a full backup is made of the hard disks in each domain controller. You disable the local Administrator account in the Default Domain Policy Group Policy object (GPO). You discover that you are no longer able to log on to either domain controller as the Administrator from the domain. You need to ensure that you can log on to both domain controllers as the Administrator from the domain. What should you do?

A.
Restart one domain controller in Safe Mode. Log on as Administrator. Create an account for a second administrator. Restart the domain controller and use the new account to remove the restrictions on the local Administrator accounts.

B.
Restore the entire hard disk on one domain controller by using the last nightly backup before the change was made. Restart the domain controller. Allow time for Active Directory replication to complete.

C.
Restart one domain controller and use a Windows Server 2003 CD to run the Recovery Console. Stop the GPC service. Restart the domain controller.

D.
Restart one domain controller in Directory Services Restore Mode. Perform an authoritative restore operation of the Domain Controllers OU in Active Directory from the last nightly backup before the change was made. Restart the domain controller.