Your network contains an Active Directory domain.
All domain controllersrun Windows Server 2008 R2.
Client computersrun either Windows 7 or Windows Vista Service Pack 2(SP2).
You need to audit user access to the administrative shares on the client computers.
What should you do?

A.
Deploy a logon script that runs Icacls.exe.

B.
Deploy a logon script that runs Auditpol.exe.

C.
From the Default Domain Policy, modify the Advanced Audit Policy Configuration.

D.
From the Default Domain Controllers Policy, modify the Advanced Audit Policy Configuration.

Explanation:
Reference:
http://support.microsoft.com/kb/921469
Administrators can use the procedure that is described in this article to deploy a custom audit policythat applies
detailed security auditing settings to Windows Vista-based and Windows Server 2008-based computers in a
Windows Server 2003 domain or in a Windows 2000 domain.
Use the Auditpol.exe command-line tool to configurethe custom audit policy settings that you want.