Your network consists of a single Active Directory domain. The remote access permission for all users is set to Control access through Remote Access Policy. You have a VPN server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). The current configuration allows all authenticated users to establish VPN connections to Server1. You create a global group named Group1.You need to prevent all members of Group1 from establishing VPN connections to Server1. What should you do?（）

• A、From the local computer policy on Server1, modify the Account Policies settings. 
• B、From Active Directory Users and Computers, modify the Security settings of Group1. 
• C、From the Routing and Remote Access snap-in, create a new remote access policy. 
• D、From the Routing and Remote Access snap-in, open the properties of Server1 and modify the security options.