Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client
computers run either Windows 7 or Windows Vista Service Pack 2 (SP2).
You need to audit user access to the administrativeshares on the client computers.
What should you do?

A.
Deploy a logon script that runs Icacls.exe.

B.
Deploy a logon script that runs Auditpol.exe.

C.
From the Default Domain Policy, modify the Advanced Audit Policy Configuration.

D.
From the Default Domain Controllers Policy, modify the Advanced Audit Policy Configuration.

Explanation:
Reference:
http://support.microsoft.com/kb/921469
Administrators can use the procedure that is described in this article to deploy a custom audit policythat applies
detailed security auditing settings to Windows Vista-based and Windows Server 2008-based computers in a
Windows Server 2003 domain or in a Windows 2000 domain.
Use the Auditpol.exe command-line tool to configurethe custom audit policy settings that you want.