Your network consists of a single Active Directory domain. An organizational unit （OU） named Servers contains all member servers in the domain. The domain contains a Group Policy object （GPO） named Policy1. 
A user account named Admin1 is used to administer the member servers. You need to allow Admin1 to apply Policy1 to the member servers. You must prevent Admin1 from modifying Policy1.
What should you do？（）

Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 （SP2）. You create a domain account named Admin1. 
You need to configure the security for Admin1 to meet the following requirements： 
（1）Allow Admin1 to monitor events in the system event log and the application event log 
（2）Allow Admin1 to create and view counter logs in Performance Monitor 
（3）Minimize the user rights assigned to Admin1 
To which group should you add Admin1？（）