You are the network administrator for Your network consists of a single Active Directory domain named All network servers run Windows Server 2003. All client computers run Windows XP Professional. TK1 is your global catalog server. TK2 runs Software Update Services (SUS). The Set Options console on TK2 uses all default settings. You configure the client computers to access the service on TK1 and TK2. Three months later, Microsoft releases a critical security update for Windows XP Professional. From a test client computer, you use Windows Update to download the update. You test the update and receive no error messages. Now you need to deploy the update to all client computers as quickly as possible. You must ensure that the update is not deployed to any servers. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two)

A. On TK1, configure the Default Domain Group Policy object (GPO) to distribute the security update.
B. On TK1, initiate replication.
C. On TK2, initiate synchronization.
D. On TK2, approve the security update.