Im not to good with Active Directory yet, also working on it, But there is something called delegation. If you put these users in there own OU you can then have them act as domain administrators of a certain part of the active directory. I believe you have to delegate control to them. Again this is kinda what i picked up from reading books never actually tried it though but i believe it might work.