Your network contains an Active Directory forest. The forest contains an Acitve Directory site for a  remote office. The remote site contains a read-only domain controller （RODC）.     You need to configure the RODC to store only the password of users in the remote site.     What should you do（）

• A、Create a Paasword Settings object （PSO）.
• B、Modify the Partial-Attribute-Set attribute of the forest.
• C、Add the users accounts of the remote site users to the Allowed RODC Password Replication Group.
• D、Add the users accounts of users who are not in the remote site to the Denied RODC Password Replication Group.