Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. You have a Remote Desktop Session Host (RD Session Host) server and a Remote Desktop Web Access (RD Web Access) server. You enable several RemoteApp applications on the RD Session Host server. You need to configure access to RemoteApp applications so that RD Web Access users see only applications to which they have been granted access. What should you do?

A.
Set NTFS permissions on the installation folder for each RemoteApp application.

B.
Assign domain users and domain security groups to each RemoteApp application.

C.
Add domain users and domain security groups to the TS Web Access Computers security group on the RD Session Host server.

D.
Specify custom menu locations on the RD Session Host server for each domain security group by using a Group Policy object (GPO).