Your company has a main office and 30 branch offices. You are planning the implementation of Active Directory directory service. You need to implement a solution that allows local administrators in the branch offices to administer user accounts in their own locations while preventing the administrators from administering any other resources in their location. You must ensure that administrators in the main office have the ability to administer all user accounts, in all locations. Main office administrators must not have the ability to edit the contents of the default Users container. What should you do?
A.
Create a forest root domain for the main office, and create a child domain for each branch office. Add the main office administrators to the Enterprise Admins group in the root domain, and add the branch office administrators to the Domain Admins group in the appropriate child domain.
B.
Create a forest root domain for the main office, and create a child domain for each branch office. Add the main office administrators to the Domain Admins group in the root domain, and add the branch office administrators to the Account Operators group in the appropriate child domain
C.
Create a single domain. Create a separate organizational unit (OU) for the main office and for each branch office. At the domain level, grant the main-office administrators the ability to create, delete, and manage user accounts. On the branch OUs, grant the location-specific administrators the ability to create, delete, and manage user accounts.
D.
Create a single domain. Create an organizational unit (OU) for the main office users and child OUs for each of the branch offices. At the main office OU, grant main-office administrators the ability to create, delete, and manage user accounts. On each child OU, grant the location-specific admin the ability to create, delete, and manage user accounts.