You are the network administrator for your company. The network consists of a single Active Directory domain. User and group objects for the sales department are located in an organizational unit （OU） named Sales. 
Peter and Mary are administrators for your company. Peter is responsible for managing Sales user objects. Mary is responsible for managing Sales group objects. 
You need to delegate Peter and Mary control over only the objects for which they are responsible. 
What should you do？（）

A. In the Sales OU， create two new OUs. Name one OU SalesUsers and place all user objects for the sales department in this OU. Name the other OU SalesGroups and place all group objects for the sales department in this OU. Grant Peter and Mary full control over the Sales OU.
B. On the Sales OU， grant Peter the right to manage user objects. On the Sales OU， grant Mary the right to manage group objects.
C. In the Sales OU， create a new OU. Name this OU SalesGroups. Place all Sales groups in theSalesGroups OU.Grant Peter the right to manage all objects in the Sales OU. Grant Mary the right to manage all objects in the SalesGroups OU.
D. On the Sales OU， deny Peter the right to manage group objects. On the Sales OU， deny Mary the right to manage user objects.