SBS 2008 Limited Network Administrator

Thank you for that information.  I forgot to mentionion that I need my restricted network administrator to be able to register a workstation on the domain.  so by using restricted groups, how to I do the following:
1.  Allow restricted network administrator user to add a standard user account on the SBS 2008 server via Windows SBS Console
2.  Allow the restricted network administrator user to change/reset passwords via Windows SBS Console.
3.  Allow the restricted network administrator user to register a workstation to the domain controller

I have create a standard user account for my restricted network administrator since I do not what to elevate them to a Network Admin on the domain controller.