active directory and user profile access

[ziad arnaout]

dear sir

i have a server installed on it windows 2000 advanced
server and i installed active directory ( DOmain
Contoller )... what i wANT TO DO IS THAT I NEED TO CREAT
A USER WITH ADMINISTRATIVE PREVILIGES WHICH HAS
EVERYTHING IN THE ADMINISTRATIVE PREVILIGES BUT I NEED
HIM TO BE PREVENTED FOM ACCESSING THE USER PROFILE ... I
MEAN DENY HIM FROM CHANGING PASSWORDS AND GROUPS FOR
USERS EVEN FOR HIMSELF...
THE administrator password will be saved with one person
responsible of creating these users and the non
administrator user with the ADMINISTRATIVE PRIVILEGES
SHALL HANDLE ALL THE SUPPORT FOR ASSIGNING RESOURCS AND
MANAGING THRE SERVICES ON THE SERVER..

 

[Serg Migel]

in this case you will need to create user (or group) and delegate to him all
administrative privileges he need - except of creating/administering user
accounts, for example