Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2012 R2. The domain contains a user named User1 and a global security group named Group1. You need to ensure that User1 can manage the group membership of Group1. The solution must minimize the number of permissions assigned to User1.
Which cmdlet should you run?
A . Add-AdPrincipalGroupMembership
B . Install-AddsDomainController
C . Install-WindowsFeature
D . Install-AddsDomain
E . Rename-AdObject
F . Set-AdAccountControl
G . Set-AdGroup
H . Set-User
Answer: G
Explanation:
The Set-ADGroup cmdlet modifies the properties of an Active Directory group. You can modify commonly used property values by using the cmdlet parameters. For example, the CManagedBy parameter allows you to specify a user or group of users who can manage the specified AD group.