Which two actions should you perform?

You have an Active Directory Rights Management Services (AD RMS) cluster.
You need to prevent users from encrypting new content. The solution must ensure that the
users can continue to decrypt content that was encrypted already.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

A.
From the Active Directory Rights Management Services console, enable
decommissioning.

B.
From the Active Directory Rights Management Services console, create a user exclusion
policy.

C.
Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\licensing.

D.
Modify the NTFS permissions of %systemdrive%\inetpub\wwwroot\_wmcs\decommission.

E.
From the Active Directory Rights Management Services console, modify the rights policy
templates.