Layer of Administrator

I’m wondering if there’s a way in Windows NT Server that we could set up a layer of administrator? How does it work if I want to set up two layers of administrator, say first and second admin?

First for total control of the whole network while the second will have all accesses except rights to create users and change permissions on folders?

Your help would be highly appreciated.