What is the best way to create a local group on a Windows 2003 server similar to an administrator except that the group will not be able to creat/delete/modify users and they cannot delete the auditing and security logs.