Your network consists of an Active Directory forest that contains two domains named contoso.com and Region1.contoso.com. All servers in the network run Windows Server 2003 Service Pack 2 (SP2). You attempt to create a universal security group and obtain the result shown in the exhibit. (Click the Exhibit button.) You need to ensure that you can create universal security groups in the contoso.com domain. What should you do in the contoso.com domain? （）
- A Modify the Default Domain Policy.
- B Modify the Default Domain Controllers Policy.
- C Raise the domain functional level of the contoso.com domain.
- D Add your user account to the Enterprise Administrators group.