Your network contains a single Active Directory domain.  Active Directory Rights Management  Services （AD RMS） is deployed on the network.   A user named User1 is a member of only the AD RMS Enterprise Administrators group.   You need to ensure that User1 can change the service connection point （SCP） for the AD RMS  installation. The solution must minimize the administrative rights of User1.   To which group should you add User1（）

• A、AD RMS Auditors
• B、AD RMS Service Group
• C、Domain Admins
• D、Schema Admins