Your company has a main office and 10 branch offices. Each branch office has an Active Directory site  that contains one domain controller. Only domain controllers in the main office are configured as Global  Catalog servers.  
You need to deactivate the Universal Group Membership Caching option on the domain controllers in the  branch offices.   
At which level should you deactivate the Universal Group Membership Caching option（）

Your company has a branch office that is configured as a separate Active Directory site and has an  Active Directory domain controller.  
The Active Directory site requires a local Global Catalog server to support a new application.  You need to configure the domain controller as a Global Catalog server.  Which tool should you use（）