You are the administrator of your company's network. You install 220 new Windows 2000 Professional computers in the Sales department. Two weeks later users report that five of the computers have stopped responding. You troubleshoot the five computers and find that the users have attached USB devices and have installed device drivers that are not supported by Windows 2000 Professional. You want to ensure that it does not happen again. You decide to configure the computer to install device drivers only for the devices that are included on the current hardware compatibility list (HCL). What should you do?（）

A. Use NTFS permission to restrict users access to the C：\WinNT\driver cache folder.
B. Use NTFS permission to restrict users access to the C：\WinNT\system32\drivers folder.
Configure Windows 2000 Professional to enable driver signing verification.
D. Configure Windows 2000 Professional to trust the Microsoft certificate authority （CA）.