Active Directory Admin - In here please!

[The_KiD]

We are going to be getting a new member of IT staff and I want them to be a general IT admin type person.

One of the roles I want them to have is the creation of new AD users, but I dont want them to have full admin access to the domain.

So is it it possible to give them a login that has access to create new user ID's but is not an "access all areas" type login?

 

[The_KiD]

Can't you just use the delegation of control wizard?

TM

ah never actually played with that delegation thing before, but it does look like what I need

Now to actually figuring it out...