Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. The domain contains a member server named Server1. Server1 has the File Server server role installed. On Server1， you create a share named Documents. The Documents share will contain the files and folders of all users. You need to ensure that when the users connect to Documents， they only see the files to which they have access. What should you do？（）

• A、Modify the NTFS permissions
• B、Modify the Share permissions
• C、Enable access-based enumeration
• D、Configure Dynamic Access Control