Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named OU1. A Group Policy object (GPO) named GPO1 is linked to OU1.
You create a user named User1, and you assign User1 the Full control permission to OU1.
Which administrative action for GPOs can User1 perform?
A. Link an existing GPO from the domain to OU1
B. Create a new GPO and link the GPO to OU1
C. Add an administrative template to GPO1
D. Edit the User Rights Assignment in GPO1
Answer is B. User1 can not apply to link an existing GPO from the domain to OU1.
The Full Control permission is applied on OU1 , not applied on GPO1
answer A. Link an existing GPO from the domain to OU1 is correct.
The Full Control permission is applied on OU1 , not applied on GPO1 , therefore BCD are incorrect.