You network consists of a single Active Directory domain. All domain controllers run Windows Server  2008 R2.   You need to reset the Directory Services Restore Mode （DSRM） password on a domain controller.   What tool should you use（）

• A、dsmod
• B、ntdsutil
• C、Local Users and Groups snap-in
• D、Active Directory Users and Computers snap-in