Delegation user creating rights

I want to delegate user creating rights to my help desk staff.  I want them to be able to create, modify user accounts for a particular OU but I do not want them to be able to create any users to have Admin rights or modify any user accounts to have admin rights.  Is this possible?  If so how would I go about doing this?

Thanks