You are a security administrator for your company. The network includes a public key infrastructure (PKI) that supports smart card logon. All client computers have smart card readers.

Managers are issued smart cards. Managers are required to use smart cards when logging on to client computers. You need to ensure that managers are required to use a smart card when logging on to any client computer and that all other users are required to use a smart card when logging on to a client computer assigned to a manager.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
On the properties of each user account used by a manager, select the Smart card required for interactive logon check box.

B.
On the computer account for each manager’s client computer, edit the DACL so that only managers are assigned the Allow – Allowed to authenticate permission.

C.
Place all client computers used by managers in an organizational unit (OU).
Link a new Group Policy object (GPO) to the OU. Configure the GPO to enforce the lnteractive logon: Require smart card setting.

D.
Place all client computers used by managers in an organizational unit (OU).
Link a new Group Policy object (GPO) to the OU. Configure the GPO to set the startup type of the Smart Card service to Automatic.