You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is audited

A corporate network includes a single Active Directory Domain Services (AD DS) domain. All regular user accounts reside in an organisational unit (OU) named Employees. All administrator accounts reside in an OU named Admins.

You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is audited.

What should you do first?

A.
Create a Group Policy Object with the Audit directory service access setting enabled and link it to the Employees OU.

B.
Modify the searchFlags property for the Name attribute in the Schema.

C.
Create a Group Policy Object with the Audit directory service access setting enabled and link it to the Admins OU.

D.
Use the Auditpol.exe command-line tool to enable the directoryservicechanges auditing subcategory.