Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 hosts a standard primary zone for contoso.com. You discover that non-domain member computers register records in the contoso.com zone. You need to prevent the non-domain member computers from registering records in the contoso.com zone. All domain member computers must be allowed to register records in the contoso.com zone. What should you do first（）
- AConfigure a trust anchor.
- BRun the Security Configuration Wizard （SCW）.
- CChange the contoso.com zone to an Active Directory-integrated zone.
- DModify the security settings of the %SystemRoot%\System32\Dns folder.