Micrsoft Exchange Administration

I have 3 exchange servers which service 4 seperate departments. In each of those departments I have a field tech who needs admin privledges to create, delete and modify mailboxes within their respective department. How do I limit them to their particular server and keep them out of the organization’s public folders? As it is currently configured they can administer anything.