Which of the following statements is true about administrating user accounts to safeguard against threats?

A) When an account is created, users must immediately change their passwords.
B) All users should have the rights to create accounts and modify their permissions.
C) Every employee in an organization should be granted equal account permissions.
D) Help desk information systems should avoid requesting authentication for in-house users.

A