Your company has an Active Directory domain. All servers run Windows Server 2008. Your company runs an Enterprise Root certification authority （CA）. You need to ensure that only administrators can sign code. Which two tasks should you perform（）
- APublish the code signing template.
- BEdit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
- CEdit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
- DModify the security settings on the template to allow only administrators to request code signing certificates.