Delegating User

I am trying to delegate a user to manage a group of users in a specific OU. I am using Windows Server 2003. I have the user setup as an Account Operator with the delegation permissions set to deny adding users & groups and deny deleting users & groups. When I log on as this user I of course can’t add users but I can delete users. What else is there?