create and delete user account on a specific ou with domain user rights

Is it possible to add users to a security group and give them right to create and delete users, but only in a specific OU?

If so, what tool can be given to them without them seing the rest of the AD?