Your network contains an Active Directory domain. The domain is configured as shown in the following table. 
Active Directory site Domain controllers  Main  DC1 and DC2  Branch1  DC3  
Branch2  None  
Users in Branch2 sometimes authenticate to a domain controller in Branch1.  
You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.
What should you do（）

A.Configure the NTDS Site Settings object.
B.Create Active Directory subnet objects.
C.Create Active Directory Domain Services connection objects.
D.Install an Intra-Site Automatic Tunnel Addressing Protocol （ISATAP） router.

A.From the IP properties， select Ignore all schedules.
B.From the IP properties， select Disable site link bridging.
C.From the NTDS Settings object， manually configure the Active Directory Domain Services connection  objects.
D.From the properties of the NTDS Site Settings object， configure the Inter-Site Topology Generator for  each site.

A.From Active Directory Sites and Services， modify the NTDS Settings.
B.From Active Directory Sites and Services， modify the NTDS Site Settings.
C.From Active Directory Users and Computers， modify the properties of all universal groups used in the  site.
D.From Active Directory Users and Computers， modify the computer objects for the domain controllers in  the site.