You need to design a permission structure for registry objects that enables the legacy application at the resorts to run. Your solution must comply with the written security policy. What should you do？（）

A. Create a GPLink the GPO to the OUs that contain computer accounts for computers that run the legacy application， Use the GPO to give the Domain Users security group full control on the partitions of the registry that the legacy application uses
B. Create a GPLink the GPO to the OUs that contain computer accounts for computers that run the legacy application. Use the GPO to give the Domain Users security group full control on the HKEY_USERS partition of the registry
Create a GPLink the GPO to the OUs that contain computer accounts for computers that run the Legacy application. Use the GPO to make all users who require access to the application members of Local Administrators group on each computer
D. Create a GPLink the GPO to the OUs that contain computer accounts for computers that run the Legacy application. Use the GPO to give all users who require access to the application full control for the Ntuser.dat file