You have Active Directory Certificate Services （AD CS） deployed. You create a custom certificate template. You need to ensure that all of the users in the domain automatically enroll for a certificate based on the custom certificate template. Which two actions should you perform（）
- AIn a Group Policy object （GPO）， configure the autoenrollment settings
- BIn a Group Policy object （GPO）， configure the Automatic Certificate Request Settings.
- COn the certificate template， assign the Read and Autoenroll permission to the Authenticated Users group.
- DOn the certificate template， assign the Read， Enroll， and Autoenroll permission to the Domain Users group.