hi, i created a domain admin, i put some rights, so he can't rename, move, change member of.

the only thing missing for the moment, is not be able for him to change the status, and tick the administrator case, of an account.
i tried several rights, but i dont find the good one.