问题：

[单选]

A user in a branch office of your company attempts to join a computer to the domain， but the  attempt fails.    
You need to enable the user to join a single computer to the domain. 
You must ensure that the  user is denied any additional rights beyond those required to complete the task.    
What should you do（）

A . Prestage the computer account in the Active Directory domain.
B . Add the user to the Domain Administrators group for one day.
C . Add the user to the Server Operators group in the Active Directory domain.
D . Grant the user the right to log on locally by using a Group Policy Object （GPO）.