Security Level for AD?

Do you need to be a Domain Admin in order to access Active Directory Users and Computers? Is there lower level admin with AD privileges?

OK, here is the story: I am running a Windows 2000 Native mode domain w/ Exch. 2000. We need to classify 1200 emps into 3 email distribution groups. An IT emp has a Win2k Pro PC. I loaded the Adminsitartive tools using Adminpak.msi onto his PC which includes Active Directory Users and Computers.

He is not currently part of the Domain Administrators group and I don’t want him to have that power. Is that my only option?

Finally, as my employer continues to reorganize, we will be moving emps from one group to another. Therefore, this is an ongoing project rather than a one-time thing.

Fitgirl