You need to design an access control strategy to prevent unauthorized users from modifying the registry on the DNS servers.
What should you do?

A.
Change the RestrictAnonymous registry subkey from 0 to 1 or 2.

B.
Ensure that DNS1 and DNS2 have to correct permissions set on the WINREG subkey for all groups.

C.
Create a Domain Local group and add unauthorized users in this group on DNS1 and DNS2.

D.
Remove the Domain Users group from the Remote Desktop users group on DNS1 and DNS2.