After observing suspicious activities in a server, a manager requests a forensic analysis. Which of the following findings should be of MOST concern to the investigator? 
A、Server is a member of a workgroup and not part of the server domain 
B、Guest account is enabled on the server 
C、Recently, 100 users were created in the server 
D、Audit logs are not enabled for the server