Your network contains an Active Directory domain named contoso.com. The domain contains 100
user accounts that reside in an organizational unit (OU) named 0U1. You need to ensure that a user
named User1 can link and unlink Group Policy objects (GPOs) to OU1. The solution must minimize
the number of permissions assigned to User1.
What should you do?
A.
Modify the permissions on OU1.
B.
Run the Set-GPPermission cmdlet.
C.
Add User1 to the Group Policy Creator Owners group.
D.
Modify the permissions on the User1 account.
Explanation:
The answer is correct, the picture in the explanation is the right one it’s just that the wrong check box is marked. The one that should be checked is: “Create, delete and manage user accounts”.
Shouldn’t it be the box Manage Group Policy links? Also, the question will be more clear if they asked: Modify the Delegation on OU1.