YouneedtodesignanaccesscontrolandpermissionstrategyforuserobjectsinActiveDirectory.Whatshouldyoudo?()

A.MakethemembersoftheAdvancedSupportsecuritygroupmembersoftheDomainAdminssecurity group

B.Giveeachdesktopsupporttechnicianpermissiontoresetpasswordsforthetop-levelOUthatcontainsuseraccountsattheirownlocation

C.DelegatefullcontroloverallOUsthatcontainuseraccountstoallAllSupportsecuritygroup

D.ChangethepermissionsonthedomainobjectanditschildobjectssothattheBasicSupportsecuritygroupisdeniedpermissions.Then，addapermissiontoeachOUthatcontainsuseraccountsthatallowsAllSupportsecuritygroupmemberstoresetpasswordsinthatOU