单项选择题

A.comandadatum.com.ThefunctionallevelofbothforestsisWindowsServer2008R2.Eachforestcontainsonedomain.ActiveDirectoryCertificateServices(ADCS)isconfiguredinthecontoso.comforesttoallowusersfrombothforeststoautomaticallyenrollusercertificates.Youneedtoensurethatallusersintheadatum.comforesthaveausercertificatefromthecontoso.comcertificationauthority(CA).Whatshouldyouconfigureintheadatum.comdomain()
A.FromtheDefaultDomainControllersPolicy,modifytheEnterpriseTrustsettings.
B.FromtheDefaultDomainControllersPolicy,modifytheTrustedPublisherssettings.
C.FromtheDefaultDomainPolicy,modifytheCertificateEnrollmentpolicy.
D.FromtheDefaultDomainPolicy,modifytheTrustedRootCertificationAuthoritysettings.