Your network contains an Active Directory domain named contoso.com. The domain contains 100
user accounts that reside in an organizational unit (OU) named 0U1. You need to ensure that a user
named User1 can link and unlink Group Policy objects (GPOs) to OU1. The solution must minimize
the number of permissions assigned to User1.
What should you do?

A.
Modify the permissions on OU1.

B.
Run the Set-GPPermission cmdlet.

C.
Add User1 to the Group Policy Creator Owners group.

D.
Modify the permissions on the User1 account.

Explanation: