You work as an administrator at ABC.com. The ABC.com network has two Active Directory forest, named eu.ABC.com and us.ABC.com, of which each has a single domain configured. Windows Server 2008 R2 has been set as the functional level for both forests.
To permit users from both forests to enroll user certificates automatically, you have configured the Active Directory Certificate Services (AD CS) in the eu.ABC.com forest.
ABC.com releases a written policy that requires all users in the us.ABC.com forest to be in possession of a user certificate from the eu.ABC.com certification authority (CA).
Which of the following actions should you take?
A.
You should consider reconfiguring the settings of the Issuing Certification Authority.
B.
You should consider reconfiguring the settings of the Intermediate Certification Authority.
C.
You should reconfigure the Certificate Enrollment policy by accessing the Default Domain Policy.
D.
You should reconfigure the Certificate Enrollment policy by accessing the Default Domain Controllers OU.