Your network contains an Active Directory domain. The domain contains an organizational unit (OU) named
OU1. OU1 contains all managed service accounts in the domain.
You need to prevent the managed service accounts from being deleted accidentally from OU1.
Which cmdlet should you use?

A.
Set-ADUser

B.
Set-ADOrganizationalUnit

C.
Set-ADServiceAccount

D.
Set-ADObject

Explanation:
You can use Set-ADOrganizationalUnitand the -ProtectedFromAccidentalDeletion $true parameter to prevent
OU1 from being deleted accidentally, but you would still be able to delete the accounts inside it. Use Set-ADObjectto protect the accounts.
Reference:
http://technet.microsoft.com/en-us/library/hh852326.aspx
Set-ADObject
Modifies an Active Directory object.
Parameter
-ProtectedFromAccidentalDeletion <Boolean>
Specifies whether to prevent the object from being deleted. When this property is set to true, you cannot delete
the corresponding object without changing the valueof the property. Possible values for this parameter include:
$false or 0
$true or 1
The following example shows how to set this parameter to true.
-ProtectedFromAccidentalDeletion $true