I want to give a goup of IT users the right to create Domain user accounts without making them Domain Admins. I dont want them to have capability to add / remove users from Domain Admins group.
Is there any way to do this?