1. Run Active Directory Users and Computers. 2. Right-click the container holding the users (or the domain name if you want to delegate all) and hit Delegate Control. 3. Welcome Screen - hit Next. 4. Users or Groups screen - click Add and select the person or group to delegate this control to. Click Next. 5. Tasks to Delegate screen - select "Create a custom task to delegate". Click Next. 6. Active Directory Object Type screen - Select "Only the following objects in the folder:". Check "User objects". Read more