Your network contains a single Active Directory domain. 
Active Directory Rights Management  Services （AD RMS） is deployed on the network.  
A user named User1 is a member of only the AD RMS Enterprise Administrators group.  
You need to ensure that User1 can change the service connection point （SCP） for the AD RMS  installation. The solution must minimize the administrative rights of User1.  
To which group should you add User1（）

Your network contains an Active Directory domain. The domain contains a server named Server1.  
Server1 runs Windows Server 2008 R2.  
You need to mount an Active Directory Lightweight Directory Services （AD LDS） snapshot from Server1.  
What should you do（）

Your network contains a server named Server1 that runs Windows Server 2008 R2.  On Server1， you create an Active Directory Lightweight Directory Services （AD LDS） instance named Instance1.  
You connect to Instance1 by using ADSI Edit.  
You run the Create Object wizard and you discover that there is no User object class.  
You need to ensure that you can create user objects in Instance1.  
What should you do（）

Your network contains a server named Server1 that runs Windows Server 2008 R2.  
You create an Active Directory Lightweight Directory Services （AD LDS） instance on Server1.  
You need to create an additional AD LDS application directory partition in the existing instance.  
Which tool should you use（）