Delegate the Unlock Account Right

First let me begin with "I know how to do it".

I just need to get a small tweak out of it and hopefully someone can help

I've followed the MS Article Q294952 and given a specific "standard" user this ability, however, the user cannot unlock anaccount of a user that belongs to the "domain admin" group. I'm assuming this is purposefull to keep the account with lower rights from changeing an admin accounts rights. Is there any way to get around this without adding the first user to the domain admin group?

any help is appreciated