You are a network administrator for your company. The network consists of a single Active Directory  domain. All servers run Windows Server 2003. The functional level of the domain is Windows Server 2003.  The organizational unit （OU） structure is shown in the exhibit. （Click the Exhibit button.） Your company  uses an X.500 directory service enabled product to support a sales and marketing application. The  application is used only by users in the sales department and the marketing department. The application  uses InetOrgPerson objects as user accounts. InetOrgPerson objects have been created in Active  Directory for all Sales and Marketing users. These users are instructed to log on by using their  InetOrgPerson object as their user account. Microsoft Identity Integration Server is configured to copy  changes to InetOrgPerson objects from Active Directory to the X.500 directory service enabled product.  All InetOrgPerson objects for marketing employees are located in the Marketing OU. All InetOrgPerson  objects for sales employees are located in the Sales OU. Mikhail is another administrator in your company.  Mikhail is responsible for managing the objects for users who require access to the X.500 directoryservice enabled product. You need to configure Active Directory to allow Mikhail to perform his  responsibilities.  Which action or actions should you take？（）

• A、 On the domain， grant Mikhail the permission to manage user objects.
• B、 On the domain， grant Mikhail the permission to manage InetOrgPerson objects.
• C、 On the Sales OU， block the inheritance of permissions.
• D、 On the Marketing OU， block the inheritance of permissions.
• E、 On the Dev OU， block the inheritance of permissions