Your network contains an Active Directory forest named contoso.com. The forest contains a single
domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server
2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You need to ensure that User1 can manage the group membership of Group1. The solution must
minimize the number of permissions assigned to User1.
Which cmdlet should you run?

A.
Add-AdPrincipalGroupMembership

B.
Install-AddsDomainController

C.
Install-WindowsFeature

D.
Install-AddsDomain

E.
Rename-AdObject

F.
Set-AdAccountControl

G.
Set-AdGroup

H.
Set-User

Explanation:
The Set-ADGroup cmdlet modifies the properties of an Active Directory group. You can modify
commonly used property values by using the cmdlet parameters. For example, the –ManagedBy
parameter allows you to specify a user or group of users who can manage the specified AD group.