You need to ensure that members of G_HelpDesk can perform the following tasks: + Reset the passwords of the sales users

Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named IT and an OU named Sales. All of the help desk user accounts are located in the IT OU. All of the sales user accounts are located in the Sales OU. The Sales OU contains a global security group named G_Sales. The IT OU contains a global security group named G_HelpDesk.
You need to ensure that members of G_HelpDesk can perform the following tasks:
+ Reset the passwords of the sales users.
+ Force the sales users to change their password at their next logon.
What should you do?

A.
Run the Set-ADFinecrainedPasswordPolicy cmdlet and specify the -identity parameter.

B.
Right-click the IT OU and select Delegate Control.

C.
Right-click the Sales OU and select Delegate Control.

D.
Run the Set-ADAccountPassword cmdlet and specify the -identity parameter.