Enables systems administrators to delegate the reseting of passwords, creation and management of users and groups and editing AD profiles within a defined organisational unit.