You need to ensure that users from Group1 can modify the Security settings of OU1 only

Your network contains an Active Directory domain named contoso.com.
You log on to a domain controller by using an account named Admin1. Admin1 is a member of the Domain
Admins group.
You view the properties of a group named Group1 as shown in the exhibit. (Refer to the Exhibit.)

Group1 is located in an organizational unit (OU) named OU1.
You need to ensure that users from Group1 can modify the Security settings of OU1 only.
What should you do from Active Directory Users and Computers?

A.
Modify the Managed By settings on OU1.

B.
Right-click contoso.com and select Delegate Control.

C.
Right-click OU1 and select Delegate Control.

D.
Modify the Security settings of Group1.

Explanation:
A: The distinguished name of the user that is assigned to manage this object.
B: Would delegat control to the whole domain
C: Delegates control to only the OU
D: Wrong Feature
http://msdn.microsoft.com/en-us/library/windows/desktop/ms676857(v=vs.85).aspx http://technet.microsoft.
com/en-us/library/cc732524.aspx