Which two of the menus listed will the engineer need to notify users are blocked to non-root virtual domain users?