Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a remote office. The remote site contains a read-only domain controller （RODC）. You need to configure the RODC to store only the password of users in the remote site. What should you do（）
- ACreate a Paasword Settings object （PSO）.
- BModify the Partial-Attribute-Set attribute of the forest.
- CAdd the users accounts of the remote site users to the Allowed RODC Password Replication Group.
- DAdd the users accounts of users who are not in the remote site to the Denied RODC Password Replication Group.