Need help setting up admin permissions to an OU

I have a user I need to setup specific permissions for in an OU. He needs to be able to reset passwords for other users within the OU except for his manager's password. He also needs to be able to create new users but I don't want him to be able to delete users. I tried to delegate a custom task but couldn't figure out how to set this up. Please help.