Your company has four offices. The network contains a single Active Directory domain. Each
office has a domain controller. Each office has an organizational unit (OU) that contains the
user accounts for the users in that office. In each office, support technicians perform basic
troubleshooting for the users in their respective office.
You need to ensure that the support technicians can reset the passwords for the user
accounts in their respective office only. The solution must prevent the technicians from
creating user accounts.
What should you do?

A.
For each OU, run the Delegation of Control Wizard.

B.
For the domain, run the Delegation of Control Wizard.

C.
For each office, create an Active Directory group, and then modify the security settings for
each group.

D.
For each office, create an Active Directory group, and then modify the
controlAccessRights attribute for each group.

Explanation:
Reference 1)
http://technet.microsoft.com/en-us/library/cc732524.aspx
To delegate control of an organizational unit

1. To open Active Directory Users and Computers, click Start, click Control Panel, doubleclick Administrative
Tools, and then double-click Active Directory Users and Computers.
2. To open Active Directory Users and Computers in Windows Server® 2012, click Start,
type dsa.msc.
3. In the console tree, right-click the organizational unit (OU) for which you want to delegate
control.
4. Click Delegate Control to start the Delegation of Control Wizard, and then follow the
instructions in the wizard.
Reference 2)
http://technet.microsoft.com/en-us/library/dd145442.aspx
Delegate the following common tasks
The following are common tasks that you can select to delegate control of them:
Reset user passwords and force password change at next logon