How to enable Helpdesk to create users

In our company we are changing slowly from a Novell 4 Network to a Win2k network. We want to delegate standard work to aour frontoffice. We are looking for a tool that would let thes paeople create users, change groups, etc in the NDS without them having administrator equivalent rights.
Can any body recommend a tool or a way to delegate thes tasks?