Which two actions should you perform?

You have an Active Directory Rights Management Services (AD RMS) cluster.
You need to prevent users from encrypting new content. The solution must ensure that the users can continue to decrypt content that was encrypted already.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. From the Active Directory Rights Management Services console, enable decommissioning.
B. From the Active Directory Rights Management Services console, create a user exclusion policy.
C. Modify the NTFS permissions of %systemdrive%inetpubwwwroot_wmcslicensing.
D. Modify the NTFS permissions of %systemdrive%inetpubwwwroot_wmcsdecommission.
E. From the Active Directory Rights Management Services console, modify the rights policy templates.