Your company has four offices. The network containsa single Active Directory domain. Each office has a
domain controller. Each office has an organizational unit (OU) that contains the user accounts for theusers in
that office. In each office, support technicians perform basic troubleshooting for the users in their respective
office.
You need to ensure that the support technicians canreset the passwords for the user accounts in their
respective office only. The solution must prevent the technicians from creating user accounts.
What should you do?

A.
For each OU, run the Delegation of Control Wizard.

B.
For the domain, run the Delegation of Control Wizard.

C.
For each office, create an Active Directory group, and then modify the security settings for each group.

D.
For each office, create an Active Directory group, and then modify the controlAccessRights attributefor
each group.

Explanation:
Reference 1:
http://technet.microsoft.com/en-us/library/cc732524.aspx
To delegate control of an organizational unit
1. To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative
Tools, and then double-click Active Directory Usersand Computers.
2. To open Active Directory Users and Computers in Windows Server 2012, click Start, type dsa.msc.
3. In the console tree, right-click the organizational unit (OU) for which you want to delegate control.
4. Click Delegate Control to start the Delegation of Control Wizard, and then follow the instructions in the
wizard.
Reference 2:
http://technet.microsoft.com/en-us/library/dd145442.aspx
Delegate the following common tasks
The following are common tasks that you can select to delegate control of them:
(…)
Reset user passwordsand force password change at next logon