What should you do?

Your network contains an Active Directory domain named contoso.com.
You plan to deploy a new Active Directory Rights Management Services (AD RMS) cluster on a server named Server1.
You need to create the AD RMS service account. The solution must use the principle of least privilege.
What should you do?
A. Create a local user account on Server1 and add the account to the Administrators group on Server1.
B. Create a domain user account and add the account to the Administrators group on Server1.
C. Create domain user account and add the account to the Domain Users group in the domain.
D. Create a domain user account and add the account to the Account Operators group in the domain.