A user in a branch office of your company attempts to join a computer to the domain， but the attempt fails. You need to enable the user to join a single computer to the domain. You must ensure that the user is denied any additional rights beyond those required to complete the task. What should you do（）
- APrestage the computer account in the Active Directory domain.
- BAdd the user to the Domain Administrators group for one day.
- CAdd the user to the Server Operators group in the Active Directory domain.
- DGrant the user the right to log on locally by using a Group Policy Object （GPO）.