Delegating in Active Directories 2003

I have a user that I want to delegate the ability to create/delete users in the OU, disable accounts, and unlock user accounts when needed.

I did the delegate wizard in AD users and computers and the user can create the Account but cannot unlock a locked account. Placed a check box in all Objects under delegate the following common tasks.

I also went under crate a custom task to delegate and gave full control to all objects and this still had no effect.

In addition I also added this user to the account operator group and had no effect.

Any suggestions would be greatly appreciated.

Thanks