Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2). The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domain contains a domain local group name EU-HR. On a server named Server1 in the contoso.com domain, you create a shared folder named Share1. You assign the Contoso-HR group the Read permission for Share1. You discover that you cannot assign permissions on Share1 to the EU-HR group. You need to ensure that the members of the EU-HR group have the Read permission on Share1. Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

• A、Add the EU-HR group to Contoso-HR.
• B、Change the scope of the EU-HR group to global.
• C、Change the scope of the Contoso-HR group to universal.
• D、Configure a shortcut trust between the EU and the Contoso domains.