问题：

[多选] Your company has an Active Directory domain. All servers run Windows Server 2008. Your company runs an Enterprise Root certification authority （CA）. You need to ensure that only administrators can sign code. Which two tasks should you perform（）

A . Publish the code signing template.
B . Edit the local computer policy of the Enterprise Root CA to allow users to trust peer certificates and allow only administrators to apply the policy.
C . Edit the local computer policy of the Enterprise Root CA to allow only administrators to manage Trusted Publishers.
D . Modify the security settings on the template to allow only administrators to request code signing certificates.