Which two actions should you perform? (Each correct answer presents part of the solution

You have Active Directory Certificate Services (AD CS) deployed.

You create a custom certificate template.

You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
In a Group Policy object (GPO), configure the autoenrollment settings.

B.
In a Group Policy object (GPO), configure the Automatic Certificate Request Settings.

C.
On the certificate template, assign the Read and Autoenroll permission to the Authenticated Users group.

D.
On the certificate template, assign the Read, Enroll, and Autoenroll permission to the Domain Users group.