Your network contains an Active Directory domain. All domain controllers run Windows Server 2008 R2. Client computers run either Windows 7 or Windows Vista Service Pack 2 （SP2）. You need to audit user access to the administrative shares on the client computers. What should you do（）

A. Deploy a logon script that runs Icacls.exe.
B. Deploy a logon script that runs Auditpol.exe.
C. From the Default Domain Policy， modify the Advanced Audit Policy Configuration.
D. From the Default Domain Controllers Policy， modify the Advanced Audit Policy Configuration.