Your network contains an Active Directory domain named contoso.com. The domain contains 30 organizational
units (OUs). You need to ensure that a user named User1 can link Group Policy Objects (GPOs) in the
domain. What should you do?
A.
From the Active Directory Users and Computers, add User1 to the Network Configuration Operators group.
B.
From the Group Policies Management, click the contoso.com node and modify the Delegation settings.
C.
From the Group Policies Management, click the Group policy Objects node and modify the Delegation
settings.
D.
From the Active Directory Users and Computers, add User1 to the Group Policy Creator Owners group.
it’s C buddy
http://technet.microsoft.com/en-us/library/cc754542.aspx
LINK is important here!
B. is correct.
Delegate Permissions to Link Group Policy Objects
1. In the Group Policy Management Console (GPMC) console tree, do one of the following:
To delegate permission to link Group Policy objects (GPOs) to either the DOMAIN or an ORGANIZATIONAL UNIT (OU), click the DOMAIN or the OU.
To delegate permission to link GPOs to a SITE, click the SITE.
http://technet.microsoft.com/en-us/library/cc755086.aspx
Yep, you’re right.
Active Directory, 5th Edition
“Link delegation can be easily accomplished using the Delegation of Control Wizard that you can access by right-clicking an organizational unit, domain, or site in the Active Directory MMC and choosing Delegate Control. You’ll want to use the “Manage Group Policy links” task. Here you are actually delegating read and write access to the gPLink and gPOptions attributes of objects.”