Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The
domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012.
The domain contains a user named User1 and a globalsecurity group named Group1.
You need to prevent User1 from changing his password. The solution must minimize administrative effort.
Which cmdlet should you run?

A.
Add-AdPrincipalGroupMembership

B.
Install- AddsDomainController

C.
Install- WindowsFeature

D.
Install-AddsDomain

E.
Rename-AdObject

F.
Set-AdAccountControl

G.
Set-AdGroup

H.
Set-User