You are an enterprise administrator for Cer-tech .com. The corporate network of the company consists ofan Active Directory domain. All the servers on the network run Windows Server 2008. The network runsTerminal services to enable remote users to run commonly required applications from their terminal. Anorganizational unit （OU） called TermSerUsers have been configured for the standard users who connect tothe Terminal Server and an OU called TermSerAdmin is configured for the administrative users. Besidesthese two types of users， no other user can connect to the Terminal Server. Which of the following optionswould you choose to ensure that only members of the TermSerAdmin OU can run the Remote DesktopProtocol files？（）

Create a GPO and disabled the Allow .rdp files from unknown publishers policy setting in the RemoteDesktop Client Connection template. Apply the GPO to the TermSerUsers OU.

Create a GPO and enable the Allow .rdp files from valid publishers and users default.rdp settingspolicy setting in the Remote Desktop Client Connection template. Apply the GPO to the TermSerUsersOU.

Create a GPO and enable the Allow .rdp files from valid publishers and users default.rdp settingspolicy setting in the Remote Desktop Client Connection template. Apply the GPO to the TermSerAdminOU.

Create a GPO and enable the Specify SHA1 thumbprints of certificates representing trusted.rdppublishers policy setting in the Remote Desktop Client Connection template. Apply the GPO to theTermSerAdmin OU.