Your network contains an Active Directory domain named contoso.com. The network contains client computers that run either Windows Vista or Windows 7. 
Active Directory Rights Management Services  （AD RMS） is deployed on the network.  
You create a new AD RMS template that is distributed by using the AD RMS pipeline. The template is  updated every month.  
You need to ensure that all the computers can use the most up-to-date version of the AD RMS template.  
You want to achieve this goal by using the minimum amount of administrative effort.  
What should you do（）

Your network contains two Active Directory forests named contoso.com and adatum.com.  Active Directory Rights Management Services （AD RMS） is deployed in contoso.com. 
An AD RMS trusted user domain （TUD） exists between contoso.com and adatum.com.  
From the AD RMS logs， you discover that some clients that have IP addresses in the adatum.com forest  are authenticating as users from contoso.com.  
You need to prevent users from impersonating contoso.com users. 
What should you do（）