You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate  template.   You need to ensure that all of the users in the domain automatically enroll for a certificate based  on the custom certificate template.     Which two actions should you perform（）

• A、In a Group Policy object （GPO）， configure the autoenrollment settings.
• B、In a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
• C、On the certificate template， assign the Read and Autoenroll permission to the Authenticated Users group.
• D、On the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users group.