2k Server user needs account Operator group rights

2k Server user needs account Operator group rights, but need to be confined to only manage the one server or OU they are associated with in the Domain. I haven’t had any luck in finding a group policy solution for this.