A.Install a Windows Server 2003 enterprise root CA, Configure certificate templates for autoenrollment
B.Install a Windows Server 2003 enterprise subordinate CA, Configure certificate templates for autoenrollment
C.Install a Windows Server 2003 stand-alone subordinate CA, Write a logon script for the client computers in the HR department that contains the Certreq.execommand
D.Install a Windows Server 2003 stand-alone root CA,Write a logon script for the client computers in the HR department that contains the Certreq.execommand

A.Configure the software restriction policy in the Default Domain Policy Group Policy object （GPO）
B.Create a new connection object by using the Connection Manager Administration Kit （CMAK）， and install the new connection object on all client computers
C.Create and configure a local security policy on both of the ISA server computers
D.Configure the Internet Explorer settings in the Default Domain Policy Group Policy object （GPO）