I have a group of developers that need to do the following:
1. User Administration / Create users / unlock accounts / change passwords
2. Access to Active Directory through MMC but not the servers
3. Create email accounts
4. View Event Logs
I know I can grant some of the tasks by Delegating Authority. Is there a way to create a Tech account in Group Policy that would allow the developers to complete the above tasks and that I can add to as needed?