Question
Can I create a non-administrative user to maintain users?
This user should be able to add, edit or remove users. But the user should not have any domain administrative permissions.
Answer
No, this is not possible.
A user with the permission to edit group memberships could add any user to the group “Domain Administrators” and therefore push himself to domain administrator.
Therefore this is prevented and such a user is not possible.