Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The
domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You need to ensure that User1 can manage the group membership of Group1. The solution must minimize the
number of permissions assigned to User1.
Which cmdlet should you run?

A.
Add-AdPrincipalGroupMembership

B.
Install-AddsDomainController

C.
Install-WindowsFeature

D.
Install-AddsDomain

E.
Rename-AdObject

F.
Set-AdAccountControl

G.
Set-AdGroup

H.
Set-User

Explanation:
The Set-ADGroup cmdlet modifies the properties of an Active Directory group. You can modify commonly used
property values by using the cmdlet parameters. For example, the –ManagedBy parameter allows you to
specify a user or group of users who can manage the specified AD group.