Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a remote office. The remote site contains a read-only domain controller （RODC）. You need to configure the RODC to store only the password of users in the remote site. What should you do（）

A. Create a Paasword Settings object （PSO）.
B. Modify the Partial-Attribute-Set attribute of the forest.
C. Add the users accounts of the remote site users to the Allowed RODC Password Replication Group.
D. Add the users accounts of users who are not in the remote site to the Denied RODC Password Replication Group.