Can someone advise me the best method to limit a group of users?
1. I have all those particular users in a helpdesk group.
2. They need to be able to Create new Users in any OU.
3. They need to be able to change Passwords.
4. They need to be able to create Groupwise accounts.

What is the Minimum rights I can give to them and where?
I assume the location is above all the ou's (the O since they need to
creat in the root and under.) true ?

Details if it not too much to ask for, Please, Please, Please.