Your company has four offices.
The network contains a single Active Directory domain.
Each officehas a domain controller.
Each officehas an organizational unit(OU) that contains the user accountsfor the users in that office.
In each office, support techniciansperform basic troubleshootingfor the users in their respective office.
You need to ensure that the support technicians can reset the passwords for the user accounts in their
respective office only.
The solution must prevent the technicians from creatinguser accounts.
What should you do?

A.
For each OU, run the Delegation of Control Wizard.

B.
For the domain, run the Delegation of Control Wizard.

C.
For each office, create an Active Directory group, and then modify the security settings for each group.

D.
For each office, create an Active Directory group, and then modify the controlAccessRights attributefor
each group.

Explanation:
Reference 1:
http://technet.microsoft.com/en-us/library/cc732524.aspx
To delegate control of an organizational unit
1. To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative
Tools, and then double-click Active Directory Usersand Computers.
2. To open Active Directory Users and Computers in Windows Server® 2012, click Start, type dsa.msc.
3. In the console tree, right-click the organizational unit (OU) for which you want to delegate control.
4. Click Delegate Control to start the Delegation of Control Wizard, and then follow the instructions in the
wizard.
Reference 2:
http://technet.microsoft.com/en-us/library/dd145442.aspx
Delegate the following common tasks
The following are common tasks that you can select to delegate control of them:
(…)
Reset user passwordsand force password change at next logon