Your network contains an Active Directory domain. All domain controllers run Windows
Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2
(SP2).
You need to audit user access to the administrative shares on the client computers.
What should you do?

A.
Deploy a logon script that runs Icacls.exe.

B.
Deploy a logon script that runs Auditpol.exe.

C.
From the Default Domain Policy, modify the Advanced Audit Policy Configuration.

D.
From the Default Domain Controllers Policy, modify the Advanced Audit Policy
Configuration.

Explanation:
http://support.microsoft.com/kb/921469
Administrators can use the procedure that is described in this article to deploy a custom
audit policy that applies detailed security auditing settings to Windows Vista-based and
Windows Server 2008-based computers in a Windows Server 2003 domain or in a Windows
2000 domain.
Use the Auditpol.exe command-line tool to configure the custom audit policy settings that
you want.