We are running a Windows Server 2016 Standard.
A user needs to manage Security Groups, specifically adding/removing members.
1. Ideally I would like this functionality without having to logon to the Domain Controller.
2. If it is easier, it is okay to allow her to logon to the Domain Controller.
What is the recommended method of achieving this objective?
Thanks in advance.