You have a single Active Directory directory service forest with two domains named contoso.com and corp.contoso.com. You need to grant a user in the contoso.com domain the permission to create Group Policy objects (GPOs) in the corp.contoso.com domain. What should you do?
A.
Delegate the Manage Group Policy links permission in the corp.contoso.com domain to the user.
B.
Add the user to a domain local group in the corp.contoso.com domain, and grant the domain local group the permission to create GPOs in the corp.contoso.com domain.
C.
Add the users user account to the Group Policy Creator Owners group in the contoso.com domain.
D.
Grant the Group Policy Creator Owners group in the corp.contoso.com domain the Full Control permission for the GPOs in the corp.contoso.com domain.