Permission to change group members

After I changed and applied a few settings in a security template based on
the hisecweb template (I don’t remember the exact changes), an ASP script
that uses ADSI stopped working.
The script changed group members of a new group (not a built in group).
Now the script returns an error message:

Active Directory error ‘80070005’
General access denied error
.asp, line

Does anyone know how to give a group of users (besides Administrators) the
permission to change group members?

The script runs as the user who logs on to an IIS 5.0 website on a Windows
2000 Server machine. The user is a member of the Users group (I would not
mind changing it to Power Users).

We tried logging on from the console to changegroups, but still did not
have permission unless we added the user to the Administrators group. I
tried applying the setup security template, but that did not help

My searching for the error number on the web did not reveal how to give the
access back.

Thank you for your help.