问题：

[多选]

Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2).
The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domain
contains a domain local group name EU-HR.
On a server named Server1 in the contoso.com domain, you create a shared folder named Share1. You assign the Contoso-HR group the Read permission for Share1.
You discover that you cannot assign permissions on Share1 to the EU-HR group.
You need to ensure that the members of the EU-HR group have the Read permission on Share1.
Which two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)

A . Add the EU-HR group to Contoso-HR.
B . Change the scope of the EU-HR group to global.
C . Change the scope of the Contoso-HR group to universal.
D . Configure a shortcut trust between the EU and the Contoso domains.