You have two Active Directory directory service forests named contoso.com and fabrikam.com. All users log on to the contoso.com domain. All servers run Windows Server 2003 and are members of the fabrikam.com domain. You create a one-way forest trust in which fabrikam.com is trusting contoso.com. Forest-wide authentication is enabled. You need to provide only selected users with access to a server in the fabrikam.com domain. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.
Grant the users the Allowed to Authenticate permission on the computer object representing the server.
B.
Grant the users the Modify permission on the computer object representing the server.
C.
Change the one-way forest trust to a two-way forest trust.
D.
Change the properties of the forest trust from Forest-wide authentication to Selective authentication.