Your network contains a file server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 is configured as shown in the following table. A user named User1 belongs to the Helpdesk group and the Support group. You need to configure security to meet the following requirements: ·Prevent User1 from changing files and folders in the Apps share. ·Allow User1 to open and run applications in the Apps share. What should you do? （）

• A、On the Apps share, assign User1 the Read share permission.
• B、On the Apps folder, deny User1 the Write NTFS permission.
• C、On the Apps folder, deny User1 the Modify NTFS permission.
• D、On the Apps folder, assign User1 the Read & Execute NTFS permission.