Rigths, permissions and admin. tasks

I have a Domain Windows 2000. I have two coworker (John and Mike). I want that John be in charge of Security (To grant rigths and permissions) and Mike administrative tasks (Install Apps, Services and Service Packs. How can I do that??? What groups should I use to do it????