User account that can add/delete/modify users but not full ADMIN privileges

Hey guys,

Basically there is a Windows 2000 server running ISA 2004 that a number of users on our network remotely logs into to add/remove user accounts regularly. Right now everyone has full local admin access privs. We are trying to find a solution that allows the creation/modification and deletion of users and groups but with the least administrator privs.

I have looked into power users, is that the only way to lessen privileges yet still allow user account creations?

Thanks,

Ryan.